{"containers": {"cna": {"affected": [{"product": "Premisys Identicard 3.1.190", "vendor": "n/a", "versions": [{"status": "affected", "version": "Premisys Identicard 3.1.190"}]}], "datePublic": "2019-01-18T00:00:00", "descriptions": [{"lang": "en", "value": "Premisys Identicard version 3.1.190 contains hardcoded credentials in the WCF service on port 9003. An authenticated remote attacker can use these credentials to access the badge system database and modify its contents."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-798", "description": "CWE-798 Hard-coded Credentials", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2019-01-19T10:57:02", "orgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be", "shortName": "tenable"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.tenable.com/security/research/tra-2019-01"}, {"name": "106552", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/106552"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "vulnreport@tenable.com", "ID": "CVE-2019-3906", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Premisys Identicard 3.1.190", "version": {"version_data": [{"version_value": "Premisys Identicard 3.1.190"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Premisys Identicard version 3.1.190 contains hardcoded credentials in the WCF service on port 9003. An authenticated remote attacker can use these credentials to access the badge system database and modify its contents."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-798 Hard-coded Credentials"}]}]}, "references": {"reference_data": [{"name": "https://www.tenable.com/security/research/tra-2019-01", "refsource": "MISC", "url": "https://www.tenable.com/security/research/tra-2019-01"}, {"name": "106552", "refsource": "BID", "url": "http://www.securityfocus.com/bid/106552"}]}}}}, "cveMetadata": {"assignerOrgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be", "assignerShortName": "tenable", "cveId": "CVE-2019-3906", "datePublished": "2019-01-18T18:00:00", "dateReserved": "2019-01-03T00:00:00", "dateUpdated": "2019-01-19T10:57:02", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:identicard:premisys_id:3.1.190:*:*:*:*:*:*:*", "matchCriteriaId": "2DB2F3CF-B710-4334-9353-C34A97FA1E82", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Premisys Identicard version 3.1.190 contains hardcoded credentials in the WCF service on port 9003. An authenticated remote attacker can use these credentials to access the badge system database and modify its contents."}, {"lang": "es", "value": "La versi\u00f3n 3.1.190 de Premisys Identicard contiene credenciales embebidas en el servicio WCF en el puerto 9003. Un atacante remoto autenticado puede usar estas credenciales para acceder a la base de datos del sistema \"badge\" y modificar su contenido."}], "id": "CVE-2019-3906", "lastModified": "2022-12-03T14:45:52.753", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "COMPLETE", "baseScore": 9.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2019-01-18T18:29:00.247", "references": [{"source": "vulnreport@tenable.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/106552"}, {"source": "vulnreport@tenable.com", "tags": ["Third Party Advisory"], "url": "https://www.tenable.com/security/research/tra-2019-01"}], "sourceIdentifier": "vulnreport@tenable.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-798"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-798"}], "source": "vulnreport@tenable.com", "type": "Secondary"}]}

{}