Secom Dr.id Access Control — known CVE vulnerabilities

Every CVE whose affected-product data names Secom Dr.id Access Control, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2020-3934 — CVSS 9.8 (critical): TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, contains a vulnerability of Pre-auth SQL…
• CVE-2021-35961 — CVSS 9.8 (critical): Dr. ID Door Access Control and Personnel Attendance Management system uses the hard-code admin default credentials that allows remote…
• CVE-2024-7731 — CVSS 9.8 (critical): Dr.ID Access Control System from SECOM does not properly validate a specific page parameter, allowing unauthenticated remote attackers to…
• CVE-2020-3935 — CVSS 7.5 (high): TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, stores users’ information by cleartext in the…
• CVE-2022-26671 — CVSS 7.3 (high): Taiwan Secom Dr.ID Access Control system’s login page has a hard-coded credential in the source code. An unauthenticated remote attacker…
• CVE-2020-3933 — CVSS 5.3 (medium): TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, allows attackers to enumerate and exam user…