RSS   Vulnerabilities for 'Roomwizard'   RSS

2011-01-11
 
CVE-2011-0423

CWE-255
 

 
The PolyVision RoomWizard with firmware 3.2.3 has a default password of roomwizard for the administrator account, which makes it easier for remote attackers to obtain console access via an HTTP session, a different vulnerability than CVE-2010-0214.

 
 
CVE-2010-0214

CWE-200
 

 
The administrative interface on the PolyVision RoomWizard with firmware 3.2.3 places the Sync Connector Active Directory (AD) credentials in a web form that is accessed over HTTP on port 80, which allows remote attackers to obtain sensitive information by reading the HTML source code corresponding to the /admin/sign/DeviceSynch URI.

 

 >>> Vendor: Polyvision 2 Products
Roomwizard firmware
Roomwizard


Copyright 2024, cxsecurity.com

 

Back to Top