Skip to content
OpenAdvisories
High ICSA-19-031-02 3 CVEs

IDenticard PremiSys (Update A)

Published Jan 31, 2019 · Updated Apr 4, 2019 · Revision 2

Vendor: IDenticard Product: PremiSys

Summary

Successful exploitation of these vulnerabilities could allow an attacker to view sensitive information via backups, obtain access to credentials, and/or obtain full access to the system with admin privileges.

Vulnerabilities 3

  • Unscored —
    CVE-2019-3906

    Premisys Identicard version 3.1.190 contains hardcoded credentials in the WCF service on port 9003. An authenticated re…

  • Unscored —
    CVE-2019-3907

    Premisys Identicard version 3.1.190 stores user credentials and other sensitive information with a known weak encryptio…

  • Unscored —
    CVE-2019-3908

    Premisys Identicard version 3.1.190 stores backup files as encrypted zip files. The password to the zip is hard-coded a…

Revision history

  1. #2

    ICSA-19-031-02 IDenticard PremiSys (Update A)

  2. #1

    ICSA-19-031-02 IDenticard PremiSys

References