Assaabloy Control Id Idsecure
9 CVEs affecting Assaabloy Control Id Idsecure. Latest disclosed: 2025-06-24. Critical: 5, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-49851 | Critical | 9.8 | 2025-06-24 | ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to an improper authentication vulnerability which could allow an attacker to bypass a… |
CVE-2023-33367 | Critical | 9.8 | 2023-08-05 | A SQL injection vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing unauthenticated attackers to write PHP files on the server's root dire… |
CVE-2023-33371 | Critical | 9.8 | 2023-08-03 | Control ID IDSecure 4.7.26.0 and prior uses a hardcoded cryptographic key in order to sign and verify JWT session tokens, allowing attackers to sign arbitrary… |
CVE-2025-49853 | Critical | 9.1 | 2025-06-24 | ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to SQL injections which could allow an attacker to leak arbitrary information and ins… |
CVE-2023-33369 | Critical | 9.1 | 2023-08-03 | A path traversal vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing attackers to delete arbitrary files on IDSecure filesystem, causing a… |
CVE-2025-49852 | High | 7.5 | 2025-06-24 | ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to a server-side request forgery vulnerability which could allow an unauthenticated a… |
CVE-2023-33370 | High | 7.5 | 2023-08-03 | An uncaught exception vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing attackers to cause the main web server of IDSecure to fault and… |
CVE-2023-33368 | Medium | 6.5 | 2023-08-03 | Some API routes exists in Control ID IDSecure 4.7.26.0 and prior, exfiltrating sensitive information and passwords to users accessing these API routes. |
CVE-2023-2044 | Low | 3.5 | 2023-04-14 | A vulnerability has been found in Control iD iDSecure 4.7.29.1 and classified as problematic. This vulnerability affects unknown code of the component Disposit… |