| Reporter | Title | Published | Views | Family All 11 |
|---|---|---|---|---|
 | CVE-2019-25241 | 24 Dec 202521:33 | – | circl |
 | iWT FaceSentry Access Control System 安全漏洞 | 24 Dec 202500:00 | – | cnnvd |
 | CVE-2019-25241 FaceSentry Access Control System 6.4.8 Remote SSH Root Access | 24 Dec 202519:27 | – | cvelist |
 | EUVD-2025-205313 | 24 Dec 202521:30 | – | euvd |
 | CVE-2019-25241 | 24 Dec 202520:15 | – | nvd |
 | SSH Brute Force Logins With Default Credentials Reporting | 2 Nov 201600:00 | – | openvas |
 | CVE-2019-25241 | 24 Dec 202520:15 | – | osv |
 | PT-2025-53327 | 24 Dec 202500:00 | – | ptsecurity |
 | CVE-2019-25241: Use of Hard-coded Credentials | 24 Dec 202500:00 | – | rapid7 |
 | CVE-2019-25241 FaceSentry Access Control System 6.4.8 Remote SSH Root Access | 24 Dec 202519:27 | – | vulnrichment |
10
Node
Node
Node
[
{
"defaultStatus": "unaffected",
"product": "FaceSentry Access Control System",
"vendor": "iWT Ltd.",
"versions": [
{
"status": "affected",
"version": "6.4.8 build 264"
},
{
"status": "affected",
"version": "5.7.2 build 568"
},
{
"status": "affected",
"version": "5.7.0 build 539"
}
]
}
]| Source | Link |
|---|---|
| iwt | www.iwt.com.hk/ |
| exploit-db | www.exploit-db.com/exploits/47067 |
| zeroscience | www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5526.php |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| /faceGuard/bin/* | path | /faceGuard/bin/* | Privilege escalation via insecure sudoers allowing execution of FaceGuard binaries without authentication. | CWE-798 |
| /faceGuard/bin/phpbin/* | path | /faceGuard/bin/* | Privilege escalation via insecure sudoers allowing execution of FaceGuard binaries without authentication. | CWE-798 |
| /faceGuard/database/Restore* | path | /faceGuard/database/Restore* | Privilege escalation path via sudoers allowing Restore operation. | CWE-798 |
| /bin/date | path | /bin/date | Granted access to date utility without authentication through sudoers. | CWE-798 |
| /bin/cat | path | /bin/cat | Read arbitrary files as root via sudoers allowed commands. | CWE-798 |
| /bin/echo | path | /bin/echo | Privilege escalation using echo via sudoers. | CWE-798 |
| /faceGuard/bin/phpbin/* | path | /faceGuard/bin/phpbin/* | SENTRYWEB alias grants root privileges to run PHP backend components. | CWE-798 |
| /bin/sed | path | /bin/sed | Privilege escalation using sed via sudoers. | CWE-798 |
| /sbin/* | path | /sbin/* | Broad sudoers privileges to sbin utilities including privileged service commands. | CWE-798 |
| /usr/sbin/* | path | /usr/sbin/* | Broad sudoers privileges to sbin utilities including privileged service commands. | CWE-798 |
10
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
15 Jul 2026 01:23Current
7.5High risk
Vulners AI Score7.5
CVSS 3.19.8
EPSS0.00735
SSVC