Iwt Facesentry Access Control System
7 CVEs affecting Iwt Facesentry Access Control System. Latest disclosed: 2026-01-08. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-25241 | Critical | 9.8 | 2025-12-24 | FaceSentry Access Control System 6.4.8 contains a critical authentication vulnerability with hard-coded SSH credentials for the wwwuser account. Attackers can… |
CVE-2019-25243 | High | 8.8 | 2025-12-24 | FaceSentry 6.4.8 contains an authenticated remote command injection vulnerability in pingTest.php and tcpPortTest.php scripts. Attackers can exploit unsanitize… |
CVE-2020-21999 | High | 8.8 | 2021-05-04 | iWT Ltd FaceSentry Access Control System 6.4.8 suffers from an authenticated OS command injection vulnerability using default credentials. This can be exploite… |
CVE-2019-25279 | High | 7.5 | 2026-01-08 | FaceSentry Access Control System 6.4.8 contains a cleartext password storage vulnerability that allows attackers to access unencrypted credentials in the devic… |
CVE-2019-25277 | Medium | 6.1 | 2026-01-08 | FaceSentry Access Control System 6.4.8 contains a cross-site scripting vulnerability in the 'msg' parameter of pluginInstall.php that allows attackers to injec… |
CVE-2019-25278 | Medium | 5.9 | 2026-01-08 | FaceSentry Access Control System 6.4.8 contains a cleartext transmission vulnerability that allows remote attackers to intercept authentication credentials. At… |
CVE-2019-25242 | Medium | 4.3 | 2025-12-24 | FaceSentry Access Control System 6.4.8 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user… |