What is CVE-2019-3906?

CVE-2019-3906 is a high-severity vulnerability in Identicard Premisys Id, classified under Use of Hard-coded Credentials. CVSS score: 8.8/10. Published 2019-01-18.

How severe is CVE-2019-3906?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Identicard Premisys Id

CVE-2019-3906

Premisys Identicard version 3.1.190 contains hardcoded credentials in the WCF service on port 9003. An authenticated remote attacker can use these credentials to access the badge system database and modify its contents.

EPSS: 0.029 (85.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Identicard Premisys_id — versions 3.1.190
N/a Premisys Identicard 3.1.190 — versions Premisys Identicard 3.1.190

Weakness classification (CWE)

CWE-798 — Use of Hard-coded Credentials

References

vulnreport@tenable.com (Third Party Advisory, x_refsource_MISC)
vulnreport@tenable.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2019-3906?: CVE-2019-3906 is a high-severity vulnerability in Identicard Premisys Id, classified under Use of Hard-coded Credentials. CVSS score: 8.8/10. Published 2019-01-18.
How severe is CVE-2019-3906?: High severity. CVSS v3 base score is 8.8 out of 10.