CVE-2019-3908 | BDVDB-2026-112074 Detail

Premisys Identicard 3.1.190

Description#

Premisys Identicard version 3.1.190 stores backup files as encrypted zip files. The password to the zip is hard-coded and unchangeable. An attacker with access to these backups can decrypt them and obtain sensitive data.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-259 Hard-coded Password

References#

https://www.tenable.com/security/research/tra-2019-01
http://www.securityfocus.com/bid/106552

Exploit#

No public exploit known

History#

Version 12019-01-18Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.