high7.5
CVE-2019-25279
FaceSentry Access Control System 6.4.8 contains a cleartext password storage vulnerability that allows attackers to access unencrypted credentials in the devic…
Impact
FaceSentry Access Control System 6.4.8 contains a cleartext password storage vulnerability that allows attackers to access unencrypted credentials in the device's SQLite database. Attackers can directly read sensitive login information stored in /faceGuard/database/FaceSentryWeb.sqlite without additional authentication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Iwt | Facesentry Access Control System Firmware | Versions 5.7.0, 5.7.2, 6.4.8 |