PT-2025-53327 · Unknown · Facesentry Access Control System

Published 2025-12-24 · Updated 2025-12-24 · CVE-2019-25241

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FaceSentry Access Control System version 6.4.8

Description The FaceSentry Access Control System contains an authentication issue involving hard-coded SSH credentials for the wwwuser account. An insecure sudoers configuration allows attackers to escalate privileges and obtain root access by executing sudo commands without authentication.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2019-25241

Affected Products

Facesentry Access Control System

References · 6

• 🔥 https://zeroscience.mk/en/vulnerabilities/ZSL-2019-5526.php · Exploit
• 🔥 https://exploit-db.com/exploits/47067 · Exploit
• https://osv.dev/vulnerability/CVE-2019-25241 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-25241 · Security Note
• http://iwt.com.hk · Note
• https://t.me/CVEtracker/40618 · Telegram Post