iwt records

7 published records for vendor iwt.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

7 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2019-25241No exploit	FaceSentry Access Control System 6.4.8 Remote SSH Root Accessiwt · facesentry access control system firmware · CWE-798 Pre-auth Auth bypass Hard-coded credentials	Critical9.8	—	0.7%	Dec 24, 2025
37Monitor	CVE-2020-21999No exploit	iWT Ltd FaceSentry Access Control System 6.4.8 suffers from an authenticated OS command injection vulnerability using default credentials.iwt · facesentry access control system firmware · CWE-78 RCE Hard-coded credentials Command injection	High8.8	—	5.2%	May 4, 2021
36Monitor	CVE-2019-25278No exploit	FaceSentry Access Control System 6.4.8 Authentication Credentials MiTM Disclosureiwt · facesentry access control system firmware · CWE-319 Pre-auth Weak crypto	Critical9.1	—	0.3%	Jan 7, 2026
35Monitor	CVE-2019-25243No exploit	FaceSentry 6.4.8 Authenticated Remote Command Injection via Ping Testiwt · facesentry access control system firmware · CWE-78 RCE Command injection	High8.7	—	2.6%	Dec 24, 2025
27Monitor	CVE-2019-25279No exploit	FaceSentry Access Control System 6.4.8 Cleartext Password Storage Vulnerabilityiwt · facesentry access control system firmware · CWE-312	Medium6.8	—	0.2%	Jan 7, 2026
20Monitor	CVE-2019-25277No exploit	FaceSentry Access Control System 6.4.8 Reflected Cross-Site Scripting via pluginInstall.phpiwt · facesentry access control system firmware · CWE-79 pre-auth RCE XSS	Medium5.1	—	0.3%	Jan 7, 2026
20Monitor	CVE-2019-25242No exploit	FaceSentry Access Control System 6.4.8 Cross-Site Request Forgery via Web Interfaceiwt · facesentry access control system firmware · CWE-352 Pre-auth CSRF	Medium5.1	—	0.2%	Dec 24, 2025

CVE-2019-25241
39Monitor
FaceSentry Access Control System 6.4.8 Remote SSH Root Access
CriticalCVSS 9.8No exploitEPSS 0%
iwt · facesentry access control system firmwareDec 24, 2025
CVE-2020-21999
37Monitor
iWT Ltd FaceSentry Access Control System 6.4.8 suffers from an authenticated OS command injection vulnerability using default credentials.
HighCVSS 8.8No exploitEPSS 5%
iwt · facesentry access control system firmwareMay 4, 2021
CVE-2019-25278
36Monitor
FaceSentry Access Control System 6.4.8 Authentication Credentials MiTM Disclosure
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Weak crypto
iwt · facesentry access control system firmwareJan 7, 2026
CVE-2019-25243
35Monitor
FaceSentry 6.4.8 Authenticated Remote Command Injection via Ping Test
HighCVSS 8.7No exploitEPSS 2%
- RCE
- Command injection
iwt · facesentry access control system firmwareDec 24, 2025
CVE-2019-25279
27Monitor
FaceSentry Access Control System 6.4.8 Cleartext Password Storage Vulnerability
MediumCVSS 6.8No exploitEPSS 0%
iwt · facesentry access control system firmwareJan 7, 2026
CVE-2019-25277
20Monitor
FaceSentry Access Control System 6.4.8 Reflected Cross-Site Scripting via pluginInstall.php
MediumCVSS 5.1No exploitEPSS 0%
- pre-auth RCE
- XSS
iwt · facesentry access control system firmwareJan 7, 2026
CVE-2019-25242
20Monitor
FaceSentry Access Control System 6.4.8 Cross-Site Request Forgery via Web Interface
MediumCVSS 5.1No exploitEPSS 0%
- Pre-auth
- CSRF
iwt · facesentry access control system firmwareDec 24, 2025