Advisories · Technology

iWT Ltd. FaceSentry Access Control System.

Every CVE that names iWT Ltd. FaceSentry Access Control System among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2019-25277 CVE record

CVSS 5.1 Medium

FaceSentry Access Control System 6.4.8 Reflected Cross-Site Scripting via pluginInstall.php
- iWT Ltd. FaceSentry Access Control System
- Cross-site scripting (XSS)
Not analysed yet 7 Jan 2026
CVE-2019-25279 CVE record

CVSS 6.8 Medium

FaceSentry Access Control System 6.4.8 Cleartext Password Storage Vulnerability
- iWT Ltd. FaceSentry Access Control System
- Information disclosure
Not analysed yet 7 Jan 2026
CVE-2019-25278 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

FaceSentry Access Control System 6.4.8 Authentication Credentials MiTM Disclosure
- iWT Ltd. FaceSentry Access Control System
- Weak cryptography or TLS
Not analysed yet 7 Jan 2026
CVE-2019-25243 CVE record

CVSS 8.7 High

FaceSentry 6.4.8 Authenticated Remote Command Injection via Ping Test
- iWT Ltd. FaceSentry Access Control System
- Command injection
Not analysed yet 24 Dec 2025
CVE-2019-25242 CVE record

CVSS 5.1 Medium

FaceSentry Access Control System 6.4.8 Cross-Site Request Forgery via Web Interface
- iWT Ltd. FaceSentry Access Control System
- Cross-site request forgery (CSRF)
Not analysed yet 24 Dec 2025
CVE-2019-25241 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

FaceSentry Access Control System 6.4.8 Remote SSH Root Access
- iWT Ltd. FaceSentry Access Control System
- Hard-coded credentials
Not analysed yet 24 Dec 2025