A cleartext transmission vulnerability in the iWT Ltd. FaceSentry Access Control System allows remote attackers to intercept authentication credentials, posing a significant risk of unauthorized access.

This vulnerability involves the transmission of sensitive authentication data over unencrypted channels. An unauthenticated attacker positioned on the network path can perform man-in-the-middle attacks to capture HTTP cookie information, which can subsequently be used to hijack user sessions.

The ability for an attacker to capture authentication cookies directly leads to full account takeover of affected users, including administrative accounts if targeted. Given the CVSS score of 7.5, this high-severity flaw threatens the confidentiality and integrity of the entire access control system, potentially allowing unauthorized physical or digital access to protected facilities or networks.

Immediate Action: Update the FaceSentry Access Control System to a secure version that mandates encrypted communication (HTTPS) for all traffic. If an update is not immediately feasible, restrict network access to the management interface to trusted segments only.

Proactive Monitoring: Monitor network traffic for unusual patterns, such as the unauthorized interception of HTTP traffic or unexpected session initiation from unknown IP addresses. Review system logs for signs of account anomalies or concurrent session logins.

Compensating Controls: Deploy a Web Application Firewall (WAF) or a VPN to enforce encryption for all traffic traversing the network. Ensure that administrative access is restricted to encrypted channels and enforce multi-factor authentication where supported.

Public Exploit Available: Yes, a technical write-up detailing the attack methodology is available via Packet Storm Security.

This vulnerability presents a high risk to organizational security due to the potential for session hijacking. Administrators must prioritize updating the affected software to a version that enforces transport-layer security. In the interim, ensure all management interfaces are isolated from public-facing networks to prevent potential attackers from positioning themselves to intercept sensitive authentication data.