Roomwizard Firmware Security Vulnerabilities

CVE-2018-7056

RoomWizard before 4.4.x allows remote attackers to obtain potentially sensitive information about IP addresses via...

CVE-2018-7057

RoomWizard before 4.4.x allows XSS via the HelpAction.action pageName...

CVE-2018-7055

GroupViewProxyServlet in RoomWizard before 4.4.x allows SSRF via the url...

CVE-2011-0423

The PolyVision RoomWizard with firmware 3.2.3 has a default password of roomwizard for the administrator account, which makes it easier for remote attackers to obtain console access via an HTTP session, a different vulnerability than...

CVE-2010-0214

The administrative interface on the PolyVision RoomWizard with firmware 3.2.3 places the Sync Connector Active Directory (AD) credentials in a web form that is accessed over HTTP on port 80, which allows remote attackers to obtain sensitive information by reading the HTML source code corresponding....