CVE-2019-3909

概要

参考情報

• securityfocus.com/bid/106552 · Third Party Advisory
• tenable.com/security/research/tra-2019-01 · Third Party Advisory

premisys id のその他の脆弱性

• CVE-2019-3908高 7.5Premisys Identicard version 3.1.190 stores backup files as encrypted zip files. The password to the zip is hard-coded and unchangeable. An a…
• CVE-2019-3907高 7.5Premisys Identicard version 3.1.190 stores user credentials and other sensitive information with a known weak encryption method (MD5 hash of…
• CVE-2019-3906高 8.8Premisys Identicard version 3.1.190 contains hardcoded credentials in the WCF service on port 9003. An authenticated remote attacker can use…