CVE-2010-0214

no score yetEPSS 1.9%

The administrative interface on the PolyVision RoomWizard with firmware 3.2.3 places the Sync Connector Active Directory (AD) credentials in a web form that is accessed over HTTP on port 80, which allows remote attackers to obtain sensitive information by reading the HTML source code corresponding to the /admin/sign/DeviceSynch URI.

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2011-01-12
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

polyvision:roomwizard
polyvision:roomwizard_firmware

References

http://packetstormsecurity.org/files/view/97291/roomwizard-disclose.txt
http://seclists.org/fulldisclosure/2011/Jan/58
http://www.kb.cert.org/vuls/id/870601
http://www.securityfocus.com/bid/45699
http://www.vupen.com/english/advisories/2011/0059

Check your stack JSON