Description
Premisys Identicard version 3.1.190 stores backup files as encrypted zip files. The password to the zip is hard-coded and unchangeable. An attacker with access to these backups can decrypt them and obtain sensitive data.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Premisys Identicard 3.1.190 | Premisys Identicard 3.1.190 | — |
Advisories 1
- ICSA-19-031-02 IDenticard PremiSys (Update A) CISA ICS & IT advisories · Apr 4, 2019