PatchTheCVEiwt vulnerabilities
Recent CVEs affecting iwt products. 6 tracked.
iwt has 6 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-01-08. Highest priority: CVE-2019-25241 (score 61/100).
- CVE-2019-25279 HIGH 7.5 MITIGATE FaceSentry Access Control System 6.4.8 contains a cleartext password storage vulnerability that allows attacke
- CVE-2019-25278 MEDIUM 5.9 MITIGATE FaceSentry Access Control System 6.4.8 contains a cleartext transmission vulnerability that allows remote atta
- CVE-2019-25277 MEDIUM 6.1 MITIGATE FaceSentry Access Control System 6.4.8 contains a cross-site scripting vulnerability in the 'msg' parameter of
- CVE-2019-25243 HIGH 8.8 MITIGATE FaceSentry 6.4.8 contains an authenticated remote command injection vulnerability in pingTest.php and tcpPortT
- CVE-2019-25242 MEDIUM 4.3 MITIGATE FaceSentry Access Control System 6.4.8 contains a cross-site request forgery vulnerability that allows attacke
- CVE-2019-25241 CRITICAL 9.8 MITIGATE FaceSentry Access Control System 6.4.8 contains a critical authentication vulnerability with hard-coded SSH cr
FAQ
How do I fix iwt vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is iwt being exploited right now?
None of the tracked iwt CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which iwt CVE should I patch first?
CVE-2019-25241 currently ranks highest (61/100): FaceSentry Access Control System 6.4.8 contains a critical authentication vulnerability with hard-coded SSH cr.