medium5.9
CVE-2019-25278
FaceSentry Access Control System 6.4.8 contains a cleartext transmission vulnerability that allows remote attackers to intercept authentication credentials.
Impact
FaceSentry Access Control System 6.4.8 contains a cleartext transmission vulnerability that allows remote attackers to intercept authentication credentials. Attackers can perform man-in-the-middle attacks to capture HTTP cookie authentication information during network communication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Iwt | Facesentry Access Control System Firmware | Versions 5.7.0, 5.7.2, 6.4.8 |