CVE-2021-35961
Critical
Description
Dr. ID Door Access Control and Personnel Attendance Management system uses the hard-code admin default credentials that allows remote attackers to access the system through the default password and obtain the highest permission.
SeverityCritical
CVSS9.8
Exploit probability—
ProductSecom Dr.id Access Control
PublishedJul 16, 2021
First seenJul 16, 2021
Weakness typeCWE-798Hard-coded credentials
How to fix
Update
- secom dr.id_access_control3.4.0.0.3.12_20210525 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| secom dr.id_access_control | v < 3.4.0.0.3.12_20210525 | 3.4.0.0.3.12_20210525 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.