Description
FaceSentry Access Control System 6.4.8 contains a critical authentication vulnerability with hard-coded SSH credentials for the wwwuser account. Attackers can leverage the insecure sudoers configuration to escalate privileges and gain root access by executing sudo commands without authentication.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
iWT Ltd. FaceSentry Access Control System
Default version status: unaffected
6.4.8 build 264affected5.7.2 build 568affected5.7.0 build 539affected