PT-2026-1677 · Unknown · Facesentry Access Control System

CVE-2019-25279 · Publicado 2026-01-07 · Atualizado 2026-01-08

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions FaceSentry Access Control System version 6.4.8

Description The FaceSentry Access Control System stores passwords in cleartext within the device’s SQLite database. This allows attackers to access unencrypted credentials directly from the /faceGuard/database/FaceSentryWeb.sqlite file without needing authentication.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Correção

Cleartext Storage of Sensitive Information

Enumeração de Fraquezas

CWE-312

Identificadores relacionados

CVE-2019-25279

Produtos afetados

Facesentry Access Control System

Referências · 7

• 🔥 https://packetstormsecurity.com/files/153501 · Exploit
• 🔥 https://zeroscience.mk/en/vulnerabilities/ZSL-2019-5529.php · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/163190 · Nota
• https://t.me/cveNotify/148024 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2019-25279 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-25279 · Nota de Segurança
• https://t.me/CVEtracker/41643 · Publicação no Telegram