CVE-2017-16241

Incorrect access control in AMAG Symmetry Door Edge Network Controllers (EN-1DBC Boot App 23611 03.60 and STD App 23603 03.60; EN-2DBC Boot App 24451 01.00 and…

published December 10, 2017

CVSS
—
EPSS
2%
Percentile
80.4
In the wild
Unconfirmed
What it is

Incorrect access control in AMAG Symmetry Door Edge Network Controllers (EN-1DBC Boot App 23611 03.60 and STD App 23603 03.60; EN-2DBC Boot App 24451 01.00 and STD App 2461 01.00) enables remote attackers to execute door controller commands (e.g., lock, unlock, add ID card value) by sending unauthenticated requests to the affected devices via Serial over TCP/IP, as demonstrated by a Ud command.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01997 · 80.4th percentile
Published
2017-12-10T01:00Z
EPSS history
Timeline
  • 10 DEC 01:00Z
    Incorrect access control in AMAG Symmetry Door Edge Network Controllers (EN-1DBC Boot App 23611 03.60 and STD App 23603 03.60; EN-2DBC Boot App 24451 01.00 and…
    cvelistv5