Lucene search

[email protected]CVE-2011-0423

HistoryJan 12, 2011 - 1:00 a.m.

CVE-2011-0423

2011-01-1201:00:02

CWE-255

[email protected]

web.nvd.nist.gov

cve-2011-0423

polyvision roomwizard

default password

firmware

remote access

vulnerability

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.9 Medium

AI Score

Confidence

Low

0.027 Low

EPSS

Percentile

90.6%

JSON

The PolyVision RoomWizard with firmware 3.2.3 has a default password of roomwizard for the administrator account, which makes it easier for remote attackers to obtain console access via an HTTP session, a different vulnerability than CVE-2010-0214.

Affected configurations

NVD

Node

polyvisionroomwizard_firmwareMatch3.2.3

AND

polyvisionroomwizard

CPENameOperatorVersion
polyvision:roomwizard_firmwarepolyvision roomwizard firmwareeq3.2.3
polyvision:roomwizardpolyvision roomwizardeq*

CPE	Name	Operator	Version
polyvision:roomwizard_firmware	polyvision roomwizard firmware	eq	3.2.3
polyvision:roomwizard	polyvision roomwizard	eq	*

References

osvdb.org/70388

packetstormsecurity.org/files/view/97291/roomwizard-disclose.txt

seclists.org/fulldisclosure/2011/Jan/58

www.kb.cert.org/vuls/id/870601

www.securityfocus.com/bid/45699

www.vupen.com/english/advisories/2011/0059

exchange.xforce.ibmcloud.com/vulnerabilities/64543

exchange.xforce.ibmcloud.com/vulnerabilities/64642

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.9 Medium

AI Score

Confidence

Low

0.027 Low

EPSS

Percentile

90.6%

JSON

Related for CVE-2011-0423

nvd2 cvelist2 prion2 cert1 cve1 packetstorm1