CVE-2019-3906CWE-798

Premisys Identicard version 3.1.190 contains hardcoded credentials in the WCF service on port 9003

published January 18, 2019

CVSS
—
EPSS
3%
Percentile
86.8
In the wild
Unconfirmed
What it is

Premisys Identicard version 3.1.190 contains hardcoded credentials in the WCF service on port 9003. An authenticated remote attacker can use these credentials to access the badge system database and modify its contents.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02890 · 86.8th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2019-01-18T18:00Z
EPSS history
Timeline
  • 18 JAN 18:00Z
    Premisys Identicard version 3.1.190 contains hardcoded credentials in the WCF service on port 9003
    cvelistv5