CVE-2019-25279— FaceSentry Access Control System 6.4.8 Cleartext Password Storage Vulnerability
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2019-25279
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
FaceSentry Access Control System 6.4.8 Cleartext Password Storage Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
FaceSentry Access Control System 6.4.8 contains a cleartext password storage vulnerability that allows attackers to access unencrypted credentials in the device's SQLite database. Attackers can directly read sensitive login information stored in /faceGuard/database/FaceSentryWeb.sqlite without additional authentication.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
敏感数据的明文存储
Source: NVD (National Vulnerability Database)
Vulnerability Title
iWT FaceSentry Access Control System 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
iWT FaceSentry Access Control System是中国iWT公司的一个人脸识别门禁控制设备 iWT FaceSentry Access Control System 6.4.8版本存在安全漏洞，该漏洞源于明文存储密码，可能导致凭据泄露。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| iWT Ltd. | FaceSentry Access Control System | 6.4.8 build 264 | - |
II. Public POCs for CVE-2019-25279
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2019-25279
请登录查看更多情报信息。
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5529.phpthird-party-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2019-25279
Same Patch Batch · iWT Ltd. · 2026-01-07 · 3 CVEs total
| CVE-2019-25277 | 6.1 MEDIUM | FaceSentry Access Control System 6.4.8 Reflected Cross-Site Scripting via pluginInstall.ph |
| CVE-2019-25278 | 5.9 MEDIUM | FaceSentry Access Control System 6.4.8 Authentication Credentials MiTM Disclosure |
IV. Related Vulnerabilities
Same product: FaceSentry Access Control System
- CVE-2019-25277
FaceSentry Access Control System 6.4.8 Reflected Cross-Site - CVE-2019-25278
FaceSentry Access Control System 6.4.8 Authentication Creden - CVE-2019-25242
FaceSentry Access Control System 6.4.8 Cross-Site Request Fo - CVE-2019-25243
FaceSentry 6.4.8 Authenticated Remote Command Injection via - CVE-2019-25241
FaceSentry Access Control System 6.4.8 Remote SSH Root Acces
Same vendor: iWT Ltd.
- CVE-2019-25277
FaceSentry Access Control System 6.4.8 Reflected Cross-Site - CVE-2019-25278
FaceSentry Access Control System 6.4.8 Authentication Creden - CVE-2019-25242
FaceSentry Access Control System 6.4.8 Cross-Site Request Fo - CVE-2019-25243
FaceSentry 6.4.8 Authenticated Remote Command Injection via - CVE-2019-25241
FaceSentry Access Control System 6.4.8 Remote SSH Root Acces
Same weakness: CWE-312
- CVE-2026-7163
Assisted-service: assisted-service: authenticated users can - CVE-2026-41385
OpenClaw < 2026.3.31 - Nostr Private Key Exposure via config - CVE-2026-6553
TYPO3 CMS Stores Cleartext Password in User Settings Module - CVE-2026-35644
OpenClaw < 2026.3.22 - Credential Exposure via baseUrl Field - CVE-2025-14815
Information Disclosure, Tampering, and Denial-of-Service Vul
V. Comments for CVE-2019-25279
No comments yet