PT-2020-17809 · Taiwan Secom Co. · Door Access Control/Personnel Attendance Management System

Hans · Published 2020-02-11 · Updated 2022-01-01 · CVE-2020-3933

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions TAIWAN SECOM CO., LTD. Door Access Control and Personnel Attendance Management system (affected versions not specified)

Description The system allows attackers to enumerate and examine user accounts, potentially leading to unauthorized access or information disclosure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2020-3933

Affected Products

Door Access Control/Personnel Attendance Management System

References · 5

• https://osv.dev/vulnerability/CVE-2020-3933 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-3933 · Security Note
• https://twcert.org.tw/en/cp-139-3317-d4edc-2.html · Note
• https://chtsecurity.com/news/1bb85fcd-9048-4587-b4d3-b18335572bac · Note
• https://gist.github.com/chtsecurity/4db471b34c3959e5ab9ec31570e4760b · Note