TI-2019-02915 CVE-2019-3909 · GHSA-999g-r275-5mjf
Premisys Identicard version 3.1.190 database uses default credentials.
Priority MEDIUM 46
Premisys Identicard version 3.1.190 database uses default credentials.
Identicard
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Identicard records in CISA KEVNo Identicard vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2019-02912 CVE-2019-3906 · GHSA-5wqr-f6rg-xf95
Hard-coded credentials in Premisys Identicard 3.1.190
Priority MEDIUM 43
Premisys Identicard version 3.1.190 contains hardcoded credentials in the WCF service on port 9003.
TI-2019-02914 CVE-2019-3908 · GHSA-hrx7-7chr-4cvm
Hard-coded credentials in Premisys Identicard 3.1.190
Priority LOW 36
Premisys Identicard version 3.1.190 stores backup files as encrypted zip files.
TI-2019-02913 CVE-2019-3907 · GHSA-3mm6-hc5r-p5rx
Hard-coded credentials in Premisys Identicard 3.1.190
Priority LOW 34
Premisys Identicard version 3.1.190 stores user credentials and other sensitive information with a known weak encryption method (MD5 hash of a salt and password).
TI-2017-10993 CVE-2017-14973 · GHSA-6vrj-jhh6-638v
IDenticard Two-Reader Controller Configuration Manager 1.18.8 (396) is vulnerable to…
Priority LOW 25
IDenticard Two-Reader Controller Configuration Manager 1.18.8 (396) is vulnerable to Stored Cross-Site Scripting (XSS) via the notes field in /~user_handler?file=logged_in.shtm (aka the edit user page).