CVE-2019-3906

Name of the Vulnerable Software and Affected Versions Premisys Identicard version 3.1.190

Description The issue concerns hardcoded credentials in the WCF service on port 9003. An authenticated remote attacker can exploit these credentials to access and modify the badge system database.

Recommendations For Premisys Identicard version 3.1.190, consider changing the hardcoded credentials in the WCF service to prevent unauthorized access. As a temporary workaround, restrict access to the WCF service on port 9003 to minimize the risk of exploitation.