Auth bypass in Amag En-1dbc
CVE-2017-16241
Incorrect access control in AMAG Symmetry Door Edge Network Controllers (EN-1DBC Boot App 23611 03.60 and STD App 23603 03.60; EN-2DBC Boot App 24451 01.00 and STD App 2461 01.00) enables remote attackers to execute door controller commands (e.g., lock, unlock, add ID card value) by sending unauthenticated requests to the affected devices via Serial over TCP/IP, as demonstrated by a Ud command.
Vulnerability class: Broken Authentication
EPSS: 0.020 (78.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.
Affected products
- Amag En-1dbc
- Amag En-1dbc_firmware — versions 03.60
- Amag En-2dbc
- Amag En-2dbc_firmware — versions 03.60
- Amag Std
- Amag Std_firmware — versions 03.60, 01.00
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_MISC, Not Applicable)
- cve@mitre.org (Third Party Advisory, x_refsource_MISC)
- cve@mitre.org (Exploit, x_refsource_MISC)
Frequently asked questions
- What is CVE-2017-16241?
- CVE-2017-16241 is a high-severity vulnerability in Amag En-1dbc, classified under Missing Authentication for Critical Function. CVSS score: 7.5/10. Published 2017-12-10.
- How severe is CVE-2017-16241?
- High severity. CVSS v3 base score is 7.5 out of 10.