PatchTheCVEfacesentry access control system firmware vulnerabilities and fixes
Recent CVEs affecting facesentry access control system firmware, with upgrade or downgrade steps. 6 tracked.
Also searched as: facesentryaccesscontrolsystemfirmware.
facesentry access control system firmware has 6 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-01-08. Highest priority: CVE-2019-25241 (score 61/100).
- CVE-2019-25279 HIGH 7.5 MITIGATE FaceSentry Access Control System 6.4.8 contains a cleartext password storage vulnerability that allows attacke
- CVE-2019-25278 MEDIUM 5.9 MITIGATE FaceSentry Access Control System 6.4.8 contains a cleartext transmission vulnerability that allows remote atta
- CVE-2019-25277 MEDIUM 6.1 MITIGATE FaceSentry Access Control System 6.4.8 contains a cross-site scripting vulnerability in the 'msg' parameter of
- CVE-2019-25243 HIGH 8.8 MITIGATE FaceSentry 6.4.8 contains an authenticated remote command injection vulnerability in pingTest.php and tcpPortT
- CVE-2019-25242 MEDIUM 4.3 MITIGATE FaceSentry Access Control System 6.4.8 contains a cross-site request forgery vulnerability that allows attacke
- CVE-2019-25241 CRITICAL 9.8 MITIGATE FaceSentry Access Control System 6.4.8 contains a critical authentication vulnerability with hard-coded SSH cr
FAQ
How do I fix facesentry access control system firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is facesentry access control system firmware being exploited right now?
None of the tracked facesentry access control system firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which facesentry access control system firmware CVE should I patch first?
CVE-2019-25241 currently ranks highest (61/100): FaceSentry Access Control System 6.4.8 contains a critical authentication vulnerability with hard-coded SSH cr.
RSS feed for facesentry access control system firmware · ← Back to latest CVEs