CVE-2021-35962 HIGH

CVE-2021-35962: TAIWAN SECOM CO., LTD., Door Access Control and Personnel Attendance Management system - Path Traversal

Vendor Taiwan Secom Co., Ltd.,
Product Door Access Control and Personnel Attendance Management system
Weakness CWE-22 · Path traversal
Published July 16, 2021
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

Specific page parameters in Dr. ID Door Access Control and Personnel Attendance Management system does not filter special characters. Remote attackers can apply Path Traversal means to download credential files from the system without permission.

Key dates

02Disclosure timeline

July 16, 2021 CVE published
September 16, 2024 Record updated