by Kastro
Paper/Archive/CVE-2021-35961

CVE-2021-35961

TAIWAN SECOM CO., LTD., Door Access Control and Personnel Attendance Management system — TAIWAN SECOM CO., LTD., Door Access Control and Personnel Attendance Management system - Use of Hard-coded Credentials

EPSS 2%CVSS 9.8
critical.is priorityof 100
46
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 82.4.824 × 2016.5No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Dr. ID Door Access Control and Personnel Attendance Management system uses the hard-code admin default credentials that allows remote attackers to access the system through the default password and obtain the highest permission.

Affected

ProductAffectedFixed inSource
Door Access Control and Personnel Attendance Management systemunspecified – 3.4.0.0.3.12_20210525–CNA

Scores by source

twcert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

reftwcert.org.tw/tw/cp-132-4905-c99ac-1.htmlrefchtsecurity.com/news/2e4e69d5-2e32-4f73-ac7e-a66432e020e4