PT-2019-16764 · Premisys · Premisys Identicard

Jimi Sebree · Publicado 2019-01-18 · Atualizado 2020-08-24 · CVE-2019-3909

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Premisys Identicard version 3.1.190

Description The Premisys Identicard database uses default credentials. A significant issue is that users are unable to change these credentials without intervention from the vendor.

Recommendations For Premisys Identicard version 3.1.190, contact the vendor to change the default database credentials, as users cannot modify them independently.

Correção

Enumeração de Fraquezas

CWE-1188

Identificadores relacionados

CVE-2019-3909

Produtos afetados

Premisys Identicard

Referências · 4

• https://osv.dev/vulnerability/CVE-2019-3909 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-3909 · Nota de Segurança
• http://securityfocus.com/bid/106552 · Nota
• https://tenable.com/security/research/tra-2019-01 · Nota