CVE-2022-26671CWE-798

TAIWAN SECOM CO., LTD., a xDoor Access Control and Personnel Attendance Management system - Hard-coded Credentials

High · published April 7, 2022

CVSS v3.1
7.3
EPSS
1%
Percentile
61.8
In the wild
Unconfirmed
What it is

Taiwan Secom Dr.ID Access Control system’s login page has a hard-coded credential in the source code. An unauthenticated remote attacker can use the hard-coded credential to acquire partial system information and modify system setting to cause partial disrupt of service.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00976 · 61.8th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2022-04-07T18:22Z
EPSS history
Timeline
  • 07 APR 18:22Z
    TAIWAN SECOM CO., LTD., a xDoor Access Control and Personnel Attendance Management system - Hard-coded Credentials
    cvelistv5