Back

CRITICAL

FaceSentry Access Control System 6.4.8 Remote SSH Root Access

Published Dec 24, 2025

Description

FaceSentry Access Control System 6.4.8 contains a critical authentication vulnerability with hard-coded SSH credentials for the wwwuser account. Attackers can leverage the insecure sudoers configuration to escalate privileges and gain root access by executing sudo commands without authentication.

Affected products

Remediation

No remediation recorded yet.

References (4)

Change history (189)
  1. MITRE
    • CVSS severity

      changed from CRITICAL to HIGH

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    • CVSS score

      changed from 9.8 to 7.5

    • CVSS severity

      changed from HIGH to CRITICAL

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

    • CVSS score

      changed from 7.5 to 9.8

  2. MITRE
    • CVSS severity

      changed from CRITICAL to HIGH

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    • CVSS score

      changed from 9.8 to 7.5

    • CVSS severity

      changed from HIGH to CRITICAL

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

    • CVSS score

      changed from 7.5 to 9.8

  3. MITRE
    • CVSS severity

      changed from CRITICAL to HIGH

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    • CVSS score

      changed from 9.8 to 7.5

    • CVSS severity

      changed from HIGH to CRITICAL

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

    • CVSS score

      changed from 7.5 to 9.8

  4. MITRE
    • CVSS severity

      changed from CRITICAL to HIGH

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    • CVSS score

      changed from 9.8 to 7.5

    • CVSS severity

      changed from HIGH to CRITICAL

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

    • CVSS score

      changed from 7.5 to 9.8

  5. MITRE
    • CVSS severity

      changed from CRITICAL to HIGH

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    • CVSS score

      changed from 9.8 to 7.5

    • CVSS severity

      changed from HIGH to CRITICAL

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

    • CVSS score

      changed from 7.5 to 9.8

  6. MITRE
    • CVSS severity

      changed from CRITICAL to HIGH

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    • CVSS score

      changed from 9.8 to 7.5

    • CVSS severity

      changed from HIGH to CRITICAL

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

    • CVSS score

      changed from 7.5 to 9.8

  7. MITRE
    • CVSS severity

      changed from CRITICAL to HIGH

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    • CVSS score

      changed from 9.8 to 7.5

    • CVSS severity

      changed from HIGH to CRITICAL

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

    • CVSS score

      changed from 7.5 to 9.8

  8. MITRE
    • CVSS severity

      changed from CRITICAL to HIGH

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    • CVSS score

      changed from 9.8 to 7.5

    • CVSS severity

      changed from HIGH to CRITICAL

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

    • CVSS score

      changed from 7.5 to 9.8

  9. MITRE
    • CVSS severity

      changed from CRITICAL to HIGH

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    • CVSS score

      changed from 9.8 to 7.5

    • CVSS severity

      changed from HIGH to CRITICAL

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

    • CVSS score

      changed from 7.5 to 9.8

  10. MITRE
    • CVSS severity

      changed from CRITICAL to HIGH

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    • CVSS score

      changed from 9.8 to 7.5

    • CVSS severity

      changed from HIGH to CRITICAL

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

    • CVSS score

      changed from 7.5 to 9.8

  11. MITRE
    • CVSS severity

      changed from CRITICAL to HIGH

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    • CVSS score

      changed from 9.8 to 7.5

    • CVSS severity

      changed from HIGH to CRITICAL

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

    • CVSS score

      changed from 7.5 to 9.8

  12. MITRE
    • CVSS severity

      changed from CRITICAL to HIGH

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    • CVSS score

      changed from 9.8 to 7.5

    • CVSS severity

      changed from HIGH to CRITICAL

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

    • CVSS score

      changed from 7.5 to 9.8

  13. MITRE
    • CVSS severity

      changed from CRITICAL to HIGH

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    • CVSS score

      changed from 9.8 to 7.5

    • CVSS severity

      changed from HIGH to CRITICAL

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

    • CVSS score

      changed from 7.5 to 9.8

  14. MITRE
    • CVSS severity

      changed from CRITICAL to HIGH

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    • CVSS score

      changed from 9.8 to 7.5

    • CVSS severity

      changed from HIGH to CRITICAL

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

    • CVSS score

      changed from 7.5 to 9.8

  15. MITRE
    • CVSS severity

      changed from CRITICAL to HIGH

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    • CVSS score

      changed from 9.8 to 7.5

    • CVSS severity

      changed from HIGH to CRITICAL

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

    • CVSS score

      changed from 7.5 to 9.8

  16. MITRE
    • CVSS severity

      changed from CRITICAL to HIGH

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    • CVSS score

      changed from 9.8 to 7.5

    • CVSS severity

      changed from HIGH to CRITICAL

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

    • CVSS score

      changed from 7.5 to 9.8

  17. MITRE
    • CVSS severity

      changed from CRITICAL to HIGH

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    • CVSS score

      changed from 9.8 to 7.5

    • CVSS severity

      changed from HIGH to CRITICAL

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

    • CVSS score

      changed from 7.5 to 9.8

  18. MITRE
    • CVSS severity

      changed from CRITICAL to HIGH

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    • CVSS score

      changed from 9.8 to 7.5

    • CVSS severity

      changed from HIGH to CRITICAL

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

    • CVSS score

      changed from 7.5 to 9.8

  19. MITRE
    • CVSS severity

      changed from CRITICAL to HIGH

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    • CVSS score

      changed from 9.8 to 7.5

    • CVSS severity

      changed from HIGH to CRITICAL

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

    • CVSS score

      changed from 7.5 to 9.8

  20. MITRE
    • CVSS severity

      changed from CRITICAL to HIGH

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    • CVSS score

      changed from 9.8 to 7.5

    • CVSS severity

      changed from HIGH to CRITICAL

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

    • CVSS score

      changed from 7.5 to 9.8

  21. MITRE
    • CVSS severity

      changed from CRITICAL to HIGH

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    • CVSS score

      changed from 9.8 to 7.5

    • CVSS severity

      changed from HIGH to CRITICAL

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

    • CVSS score

      changed from 7.5 to 9.8

  22. MITRE
    • CVSS severity

      changed from CRITICAL to HIGH

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    • CVSS score

      changed from 9.8 to 7.5

    • CVSS severity

      changed from HIGH to CRITICAL

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

    • CVSS score

      changed from 7.5 to 9.8

  23. MITRE
    • CVSS severity

      changed from CRITICAL to HIGH

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    • CVSS score

      changed from 9.8 to 7.5

    • CVSS severity

      changed from HIGH to CRITICAL

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

    • CVSS score

      changed from 7.5 to 9.8

  24. MITRE
    • CVSS severity

      changed from CRITICAL to HIGH

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    • CVSS score

      changed from 9.8 to 7.5

    • CVSS severity

      changed from HIGH to CRITICAL

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

    • CVSS score

      changed from 7.5 to 9.8

  25. MITRE
    • CVSS severity

      changed from CRITICAL to HIGH

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    • CVSS score

      changed from 9.8 to 7.5

    • CVSS severity

      changed from HIGH to CRITICAL

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

    • CVSS score

      changed from 7.5 to 9.8

  26. MITRE
    • CVSS severity

      changed from CRITICAL to HIGH

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    • CVSS score

      changed from 9.8 to 7.5

    • CVSS severity

      changed from HIGH to CRITICAL

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

    • CVSS score

      changed from 7.5 to 9.8

  27. MITRE
    • CVSS severity

      changed from CRITICAL to HIGH

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    • CVSS score

      changed from 9.8 to 7.5

    • CVSS severity

      changed from HIGH to CRITICAL

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

    • CVSS score

      changed from 7.5 to 9.8

  28. MITRE
    • CVSS severity

      changed from CRITICAL to HIGH

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    • CVSS score

      changed from 9.8 to 7.5

    • CVSS severity

      changed from HIGH to CRITICAL

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

    • CVSS score

      changed from 7.5 to 9.8

  29. MITRE
    • CVSS severity

      changed from CRITICAL to HIGH

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    • CVSS score

      changed from 9.8 to 7.5

    • CVSS severity

      changed from HIGH to CRITICAL

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

    • CVSS score

      changed from 7.5 to 9.8

  30. MITRE
    • CVSS severity

      changed from CRITICAL to HIGH

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    • CVSS score

      changed from 9.8 to 7.5

    • CVSS severity

      changed from HIGH to CRITICAL

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

    • CVSS score

      changed from 7.5 to 9.8

  31. MITRE
    • CVSS severity

      changed from CRITICAL to HIGH

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    • CVSS score

      changed from 9.8 to 7.5

    • CVSS severity

      changed from HIGH to CRITICAL

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

    • CVSS score

      changed from 7.5 to 9.8

  32. MITRE
    • CVSS severity

      changed from CRITICAL to HIGH

    • CVSS vector

      changed from CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

    • CVSS score

      changed from 9.8 to 7.5

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner VulnCheck
Published Dec 24, 2025
Updated Jul 15, 2026
Reserved Dec 24, 2025

CISA Vulnrichment

Updated Dec 24, 2025

NVD

Status Modified
Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner VulnCheck
Published Dec 24, 2025
Updated Jul 15, 2026

GitHub

No data