A critical vulnerability in the iWT Ltd. FaceSentry Access Control System permits unauthenticated remote attackers to achieve full root system compromise via hard-coded credentials.

The device ships with hard-coded SSH credentials (wwwuser:123456) on port 23445, combined with an insecure sudoers configuration that permits the user to execute all commands as root without a password. This allows an unauthenticated attacker to bypass all security controls and gain full administrative control over the hardware.

Successful exploitation of this vulnerability grants an attacker complete control over the physical access control appliance, which could lead to unauthorized entry, manipulation of security logs, or the disabling of facility security systems. Given the CVSS score of 7.5, this high-severity flaw poses a significant risk to the physical security and data integrity of the environment where the system is deployed.

Immediate Action: Update the device firmware to a version that removes the hard-coded credentials and restricts sudoers privileges. If an update is not immediately available, disable SSH access on the device or restrict access to the management port via a strictly controlled network segment.

Proactive Monitoring: Monitor network traffic for unauthorized connection attempts to port 23445 and review system logs for suspicious sudo command execution or unexpected user activity.

Compensating Controls: Implement network-level access control lists (ACLs) to ensure that only authorized administrative workstations can communicate with the device on the SSH management port.

Public Exploit Available: Yes, a functional exploit script exists on ExploitDB (EDB-ID: 47067).

This vulnerability represents a severe risk to physical security infrastructure due to the ease with which an attacker can obtain root access. Administrators must prioritize updating affected hardware immediately or isolating the devices from the network to prevent unauthorized access. Failure to remediate this issue could allow an attacker to bypass physical entry controls entirely.