IDenticard PremiSys ID 3.1.190

CPE Details

IDenticard PremiSys ID 3.1.190
identicard
premisys_id
3.1.190
2019-11-20
16h21 +00:00
2019-11-20
16h21 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:identicard:premisys_id:3.1.190:*:*:*:*:*:*:*

Informations

Vendor

identicard

Product

premisys_id

Version

3.1.190

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2019-3906 2019-01-18 17h00 +00:00 Premisys Identicard version 3.1.190 contains hardcoded credentials in the WCF service on port 9003. An authenticated remote attacker can use these credentials to access the badge system database and modify its contents.
8.8
High
CVE-2019-3907 2019-01-18 17h00 +00:00 Premisys Identicard version 3.1.190 stores user credentials and other sensitive information with a known weak encryption method (MD5 hash of a salt and password).
7.5
High
CVE-2019-3908 2019-01-18 17h00 +00:00 Premisys Identicard version 3.1.190 stores backup files as encrypted zip files. The password to the zip is hard-coded and unchangeable. An attacker with access to these backups can decrypt them and obtain sensitive data.
7.5
High
CVE-2019-3909 2019-01-18 17h00 +00:00 Premisys Identicard version 3.1.190 database uses default credentials. Users are unable to change the credentials without vendor intervention.
9.8
Critical
The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.