FaceSentry Access Control System Hard-Coded SSH Credentials and Privilege Escalation Vulnerability

A critical authentication vulnerability has been identified in FaceSentry Access Control System version 6.4.8. The vulnerability arises from hard-coded SSH credentials for the wwwuser account, allowing unauthorized access. Attackers can exploit an insecure sudoers configuration to escalate privileges and gain root access by executing sudo commands without authentication.

Impact

Exploitation of this vulnerability allows for unauthorized SSH access as the wwwuser account, with subsequent privilege escalation to root.

Reproduction

The vulnerability can be reproduced by connecting to the device via SSH on port 23445 using the hard-coded credentials wwwuser and 123456. Once logged in, the wwwuser account can execute sudo commands without authentication, taking advantage of the insecure sudoers configuration to gain root access.