iWT FaceSentry Access Control System Cleartext Password Storage Vulnerability

A vulnerability exists in iWT FaceSentry Access Control System version 6.4.8, where credentials for accessing the web interface are stored in cleartext within the device's SQLite database. This unencrypted storage allows attackers to directly access sensitive login information without any additional authentication. The vulnerable database file is located at /faceGuard/database/FaceSentryWeb.sqlite.

Impact

Exploitation of this vulnerability could lead to unauthorized access to user credentials, including usernames and passwords, stored in the unencrypted database.

Reproduction

The vulnerability can be reproduced by accessing the FaceSentryWeb.sqlite database file using SQLite. The unencrypted passwords can be extracted from the TWebUser table, which contains user credentials in cleartext.