Taiwan Secom Dr.ID Access Control system’s login page has...
High severity
Unreviewed
Published
Apr 8, 2022
to the GitHub Advisory Database
•
Updated Jan 27, 2023
Description
Published by the National Vulnerability Database
Apr 7, 2022
Published to the GitHub Advisory Database
Apr 8, 2022
Last updated
Jan 27, 2023
Taiwan Secom Dr.ID Access Control system’s login page has a hard-coded credential in the source code. An unauthenticated remote attacker can use the hard-coded credential to acquire partial system information and modify system setting to cause partial disrupt of service.
References