CVE-2010-0214: Polyvision Roomwizard

Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days.

The administrative interface on the PolyVision RoomWizard with firmware 3.2.3 places the Sync Connector Active Directory (AD) credentials in a web form that is accessed over HTTP on port 80, which allows remote attackers to obtain sensitive information by reading the HTML source code corresponding to the /admin/sign/DeviceSynch URI.

Affected products

• Polyvision Roomwizard
• Polyvision Roomwizard Firmware: version 3.2.3 only

Published 2011-01-12. Last modified 2026-06-16.