10
CVE-2021-35961
- EPSS 2.19%
- Veröffentlicht 16.07.2021 16:15:10
- Zuletzt bearbeitet 21.11.2024 06:12:50
- Erkennungen
LoginTAIWAN SECOM CO., LTD., Door Access Control and Personnel Attendance Management system - Use of Hard-coded Credentials
Dr. ID Door Access Control and Personnel Attendance Management system uses the hard-code admin default credentials that allows remote attackers to access the system through the default password and obtain the highest permission.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Secom ≫ Dr.Id Access Control Version < 3.4.0.0.3.12_20210525
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.19% | 0.801 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
| Cert TW | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
CWE-798 Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
https://www.chtsecurity.com/news/2e4e69d5-2e32-4f73-ac7e-a66432e020e4
https://www.twcert.org.tw/tw/cp-132-4905-c99ac-1.html