Default credentials

The PolyVision RoomWizard with firmware 3.2.3 has a default password of roomwizard for the administrator account, which makes it easier for remote attackers to obtain console access via an HTTP session, a different vulnerability than CVE-2010-0214...

CVE-2010-0214

The CVE-2010-0214 issue affects PolyVision RoomWizard firmware 3.2.3. The administrative web interface serves Sync Connector Active Directory credentials in plaintext within a web page accessible over HTTP (port 80), specifically via the /admin/sign/DeviceSynch URI, allowing remote attackers with...