A cleartext storage vulnerability in iWT Ltd. FaceSentry Access Control System allows attackers to compromise sensitive credentials stored in the device database.

This vulnerability involves the insecure, cleartext storage of sensitive information within the /faceGuard/database/FaceSentryWeb.sqlite file. An attacker with local access to the system can read unencrypted credentials directly from the database without requiring authentication.

The compromise of administrative credentials poses a significant security risk, as it allows unauthorized actors to gain full control over physical access management systems. This exposure can lead to unauthorized facility entry, manipulation of security logs, and a total loss of confidentiality regarding user authentication data. While the CVSS score is 8.2, the potential for physical security breaches makes this a high-priority risk.

Immediate Action: Contact iWT Ltd. support immediately to determine if a patch or firmware update is available for your specific build, as no public patch is currently confirmed.

Proactive Monitoring: Review system access logs for any unauthorized attempts to access or transfer the SQLite database files located in the /faceGuard/database/ directory.

Compensating Controls: Restrict local access to the affected hardware components and ensure that the device file system is protected by physical security measures to prevent unauthorized extraction of the database.

Public Exploit Available: Yes, a proof-of-concept is documented in the technical write-up published by Packet Storm Security.

Given the sensitivity of access control systems, this vulnerability should be treated with urgency. Administrators must restrict physical and logical access to the device immediately while awaiting formal guidance or remediation from the vendor. Failure to secure these credentials could facilitate unauthorized physical access to protected environments.