VULNERABILITY INTELLIGENCE

CVE-2019-3906

CVSS score8.8 HIGH
EPSS probability2.89%
CISA KEVNot currently listed
Published2019-01-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Premisys Identicard version 3.1.190 contains hardcoded credentials in the WCF service on port 9003. An authenticated remote attacker can use these credentials to access the badge system database and modify its contents.

Weakness classification

  • CWE-798: Use of Hard-coded Credentials

Primary references