Skip to content
OpenAdvisories

Vendor

iWT

6 known vulnerabilities.

Products

FaceSentry Access Control System 6
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2019-25279

    FaceSentry Access Control System 6.4.8 Cleartext Password Storage Vulnerability

    FaceSentry Access Control System 6.4.8 contains a cleartext password storage vulnerability that allows attackers to access unencrypted credentials in the device's SQLite database. Attackers can directly read sensitive login information stored in /faceGuard/da…

    iWT FaceSentry Access Control System
  • High 7.5
    CVE-2019-25241

    FaceSentry Access Control System 6.4.8 Remote SSH Root Access

    FaceSentry Access Control System 6.4.8 contains a critical authentication vulnerability with hard-coded SSH credentials for the wwwuser account. Attackers can leverage the insecure sudoers configuration to escalate privileges and gain root access by executing…

    iWT FaceSentry Access Control System
  • High 8.8
    CVE-2019-25243

    FaceSentry 6.4.8 Authenticated Remote Command Injection via Ping Test

    FaceSentry 6.4.8 contains an authenticated remote command injection vulnerability in pingTest.php and tcpPortTest.php scripts. Attackers can exploit unsanitized input parameters to inject and execute arbitrary shell commands with root privileges by manipulati…

    iWT FaceSentry Access Control System