CVE-2021-35962
TAIWAN SECOM CO., LTD., Door Access Control and Personnel Attendance Management system - Path Traversal
- State
- Published
- Severity
- 7.5 High
- Published
- Jul 16, 2021
- Updated
- Sep 16, 2024
- Reserved
- Jun 30, 2021
Description
Specific page parameters in Dr. ID Door Access Control and Personnel Attendance Management system does not filter special characters. Remote attackers can apply Path Traversal means to download credential files from the system without permission.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | twcert |
Weaknesses
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected Products
| Product | Versions |
|---|---|
Door Access Control and Personnel Attendance Management systemTAIWAN SECOM CO., LTD., |
|
Door Access Control and Personnel Attendance Management systemTAIWAN SECOM CO., LTD., |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.