CVE-2021-35962

ALTO 7.5CVE-2021-35962 · Published 16/07/2021 · updated 17/06/2026

In breve

CVE-2021-35962 è una vulnerabilità ALTO (CVSS 7.5) che riguarda door access control (secom), personnel attendance system (secom).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.8%, superiore al 78.3% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
door access control secom	`≤ 3.3.2`	No fix yet
personnel attendance system secom	`≤ 3.4.0.0.3.12_20210525`	No fix yet

Description

Specific page parameters in Dr. ID Door Access Control and Personnel Attendance Management system does not filter special characters. Remote attackers can apply Path Traversal means to download credential files from the system without permission.

References

chtsecurity.com/news/d7ec2db9-12dd-439f-b014-b956ce231054 · Third Party Advisory
twcert.org.tw/tw/cp-132-4906-89381-1.html · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free