CVE-2021-35962CWE-22

TAIWAN SECOM CO., LTD., Door Access Control and Personnel Attendance Management system - Path Traversal

High · published July 16, 2021

CVSS v3.1
7.5
EPSS
2%
Percentile
78.1
In the wild
Unconfirmed
What it is

Specific page parameters in Dr. ID Door Access Control and Personnel Attendance Management system does not filter special characters. Remote attackers can apply Path Traversal means to download credential files from the system without permission.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01781 · 78.1th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2021-07-16T15:20Z
EPSS history
Timeline
  • 16 JUL 15:20Z
    TAIWAN SECOM CO., LTD., Door Access Control and Personnel Attendance Management system - Path Traversal
    cvelistv5