CVE-2019-3906

Summary

Premisys Identicard version 3.1.190 contains hardcoded credentials in the WCF service on port 9003. An authenticated remote attacker can use these credentials to access the badge system database and modify its contents.

Affected Software

VendorProductVersion RangeStatus
n/aPremisys Identicard 3.1.190Premisys Identicard 3.1.190affected

Weaknesses

  • CWE-798: CWE-798 Hard-coded Credentials

ADP Enrichment

CVE Program Container

Additional References

References