PT-2011-1359 · Polyvision · Polyvision Roomwizard

Published 2011-01-12 · Updated 2017-08-17 · CVE-2010-0214

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions PolyVision RoomWizard version 3.2.3

Description The issue concerns the administrative interface of the PolyVision RoomWizard, where the Sync Connector Active Directory credentials are placed in a web form accessed over HTTP on port 80. This allows remote attackers to obtain sensitive information by reading the HTML source code corresponding to the "/admin/sign/DeviceSynch" API endpoint.

Recommendations For PolyVision RoomWizard version 3.2.3, consider disabling access to the /admin/sign/DeviceSynch API endpoint until a secure method of handling credentials is implemented. Restrict access to the administrative interface to minimize the risk of exploitation. Avoid using HTTP for sensitive operations; instead, use HTTPS to encrypt the communication.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2010-0214

Affected Products

Polyvision Roomwizard

References · 7

• 🔥 http://seclists.org/fulldisclosure/2011/Jan/58 · Exploit
• 🔥 http://packetstormsecurity.org/files/view/97291/roomwizard-disclose.txt · Exploit
• http://vupen.com/english/advisories/2011/0059 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0214 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64543 · Note
• http://kb.cert.org/vuls/id/870601 · Note
• http://securityfocus.com/bid/45699 · Note