What is CVE-2021-35962?

CVE-2021-35962 is a high-severity vulnerability in Secom Door Access Control, classified under Path Traversal. CVSS score: 7.5/10. Published 2021-07-16.

How severe is CVE-2021-35962?

High severity. CVSS v3 base score is 7.5 out of 10.

Path Traversal in Secom Door Access Control

CVE-2021-35962

Specific page parameters in Dr. ID Door Access Control and Personnel Attendance Management system does not filter special characters. Remote attackers can apply Path Traversal means to download credential files from the system without permission.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.018 (76.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Secom Door_access_control
Secom Personnel_attendance_system
Taiwan Secom Co., Ltd., Door Access Control And Personnel Attendance Management System — versions unspecified

Weakness classification (CWE)

CWE-22 — Path Traversal

References

twcert@cert.org.tw (Third Party Advisory, x_refsource_MISC)
twcert@cert.org.tw (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2021-35962?: CVE-2021-35962 is a high-severity vulnerability in Secom Door Access Control, classified under Path Traversal. CVSS score: 7.5/10. Published 2021-07-16.
How severe is CVE-2021-35962?: High severity. CVSS v3 base score is 7.5 out of 10.