Secom Dr.id Attendance System — known CVE vulnerabilities

Every CVE whose affected-product data names Secom Dr.id Attendance System, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2020-3934 — CVSS 9.8 (critical): TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, contains a vulnerability of Pre-auth SQL…
• CVE-2024-7732 — CVSS 9.8 (critical): Dr.ID Access Control System from SECOM does not properly validate a specific page parameter, allowing unauthenticated remote attackers to…
• CVE-2020-3935 — CVSS 7.5 (high): TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, stores users’ information by cleartext in the…
• CVE-2022-26671 — CVSS 7.3 (high): Taiwan Secom Dr.ID Access Control system’s login page has a hard-coded credential in the source code. An unauthenticated remote attacker…
• CVE-2020-3933 — CVSS 5.3 (medium): TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, allows attackers to enumerate and exam user…