CVE-2019-3906

Published: Jan 18, 2019Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Premisys Identicard version 3.1.190 contains hardcoded credentials in the WCF service on port 9003. An authenticated remote attacker can use these credentials to access the badge system database and modify its contents.

Affected (1)

Products: Identicard: Premisys Id

Identicard

1 product

Premisys Id

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Identicard Premisys Id	Version 3.1.190

Related CWEs

CWE-798

Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

References (4)

http://www.securityfocus.com/bid/106552

Source: vulnreport@tenable.com

Third Party AdvisoryVDB Entry

https://www.tenable.com/security/research/tra-2019-01

Source: vulnreport@tenable.com

Third Party Advisory

http://www.securityfocus.com/bid/106552

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://www.tenable.com/security/research/tra-2019-01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.