NetSight
high8.8

CVE-2019-3906

Premisys Identicard version 3.1.190 contains hardcoded credentials in the WCF service on port 9003.

Impact

Premisys Identicard version 3.1.190 contains hardcoded credentials in the WCF service on port 9003. An authenticated remote attacker can use these credentials to access the badge system database and modify its contents.

Affected products

VendorProductAffected versions
IdenticardPremisys Id
Version 3.1.190

Weakness classification

References