The Polycom ViewStation FX set top video system allows users to change configuration of the video conferencing system. A bug introduced in the Polycom ViewStation FX Release v4.2 allows users full access to the video conferencing system including changing the admin password.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/30623/polycom.auth-bypass.txt
Source: https://packetstormsecurity.com/files/related/30623/polycom.auth-bypass.txt.html