CVE-2019-3906: Identicard Premisys Id

High severity, CVSS 8.8. EPSS: 2.9% chance of exploitation in the next 30 days.

Premisys Identicard version 3.1.190 contains hardcoded credentials in the WCF service on port 9003. An authenticated remote attacker can use these credentials to access the badge system database and modify its contents.

Affected products

• Identicard Premisys Id: version 3.1.190 only

Published 2019-01-18. Last modified 2026-06-17.