iwt kayıtları
iwt üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2
- CWE-312 Cleartext Storage of Sensitive Information1
- CWE-319 Cleartext Transmission of Sensitive Information1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-798 Use of Hard-coded Credentials1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2019-25241İstismar yok | FaceSentry Access Control System 6.4.8 Remote SSH Root Accessiwt · facesentry access control system firmware · CWE-798 | Kritik9,8 | — | %0,7 | 24 Ara 2025 |
37İzleyin | CVE-2020-21999İstismar yok | iWT Ltd FaceSentry Access Control System 6.4.8 suffers from an authenticated OS command injection vulnerability using default credentials.iwt · facesentry access control system firmware · CWE-78 | Yüksek8,8 | — | %5,2 | 4 May 2021 |
36İzleyin | CVE-2019-25278İstismar yok | FaceSentry Access Control System 6.4.8 Authentication Credentials MiTM Disclosureiwt · facesentry access control system firmware · CWE-319 | Kritik9,1 | — | %0,3 | 7 Oca 2026 |
35İzleyin | CVE-2019-25243İstismar yok | FaceSentry 6.4.8 Authenticated Remote Command Injection via Ping Testiwt · facesentry access control system firmware · CWE-78 | Yüksek8,7 | — | %2,6 | 24 Ara 2025 |
27İzleyin | CVE-2019-25279İstismar yok | FaceSentry Access Control System 6.4.8 Cleartext Password Storage Vulnerabilityiwt · facesentry access control system firmware · CWE-312 | Orta6,8 | — | %0,2 | 7 Oca 2026 |
20İzleyin | CVE-2019-25277İstismar yok | FaceSentry Access Control System 6.4.8 Reflected Cross-Site Scripting via pluginInstall.phpiwt · facesentry access control system firmware · CWE-79 | Orta5,1 | — | %0,3 | 7 Oca 2026 |
20İzleyin | CVE-2019-25242İstismar yok | FaceSentry Access Control System 6.4.8 Cross-Site Request Forgery via Web Interfaceiwt · facesentry access control system firmware · CWE-352 | Orta5,1 | — | %0,2 | 24 Ara 2025 |
- CVE-2019-2524139İzleyin
FaceSentry Access Control System 6.4.8 Remote SSH Root Access
KritikCVSS 9,8İstismar yokEPSS %1iwt · facesentry access control system firmware24 Ara 2025
- CVE-2020-2199937İzleyin
iWT Ltd FaceSentry Access Control System 6.4.8 suffers from an authenticated OS command injection vulnerability using default credentials.
YüksekCVSS 8,8İstismar yokEPSS %5iwt · facesentry access control system firmware4 May 2021
- CVE-2019-2527836İzleyin
FaceSentry Access Control System 6.4.8 Authentication Credentials MiTM Disclosure
KritikCVSS 9,1İstismar yokEPSS %0iwt · facesentry access control system firmware7 Oca 2026
- CVE-2019-2524335İzleyin
FaceSentry 6.4.8 Authenticated Remote Command Injection via Ping Test
YüksekCVSS 8,7İstismar yokEPSS %3iwt · facesentry access control system firmware24 Ara 2025
- CVE-2019-2527927İzleyin
FaceSentry Access Control System 6.4.8 Cleartext Password Storage Vulnerability
OrtaCVSS 6,8İstismar yokEPSS %0iwt · facesentry access control system firmware7 Oca 2026
- CVE-2019-2527720İzleyin
FaceSentry Access Control System 6.4.8 Reflected Cross-Site Scripting via pluginInstall.php
OrtaCVSS 5,1İstismar yokEPSS %0iwt · facesentry access control system firmware7 Oca 2026
- CVE-2019-2524220İzleyin
FaceSentry Access Control System 6.4.8 Cross-Site Request Forgery via Web Interface
OrtaCVSS 5,1İstismar yokEPSS %0iwt · facesentry access control system firmware24 Ara 2025