CVE-2019-3906 | BDVDB-2026-112072 Detail

Premisys Identicard 3.1.190

Description#

Premisys Identicard version 3.1.190 contains hardcoded credentials in the WCF service on port 9003. An authenticated remote attacker can use these credentials to access the badge system database and modify its contents.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-798 Use of Hard-coded Credentials

References#

https://www.tenable.com/security/research/tra-2019-01
http://www.securityfocus.com/bid/106552

Exploit#

No public exploit known

History#

Version 12019-01-18Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.