CVE-2018-10947

CVE-2018-10947 affects Polycom RealPresence Debut before version 1.3.2. The root cause is that the admin cookie is reset only after a Debut device is rebooted, leaving session handling unchanged until reboot. Impact details in the provided sources are limited to this behavior; no exploitation spe...

CVE-2018-10946

Polycom RealPresence Debut vulnerable in versions earlier than 1.3.0-66872. The flaw lets an attacker read the admin user’s password via the admin web UI. Affected component is the device’s admin interface; root cause involves unsafe password exposure in the UI flow. Impacts include confidentiali...