Skip to content
OpenAdvisories
Critical · 9.8 CVE-2020-3934 EUVD-2020-25199GHSA-h52j-fhqv-qpvw

TAIWAN SECOM CO., LTD. - Pre-auth SQL Injection

Published Feb 11, 2020 · Updated Sep 17, 2024 · Assigned by twcert

Description

TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, contains a vulnerability of Pre-auth SQL Injection, allowing attackers to inject a specific SQL command.

Affected products

VendorProductAffectedFixed
TAIWAN SECOM Door Access Control system ≤ 3.3.2 —
TAIWAN SECOM Personnel Attendance system ≤ 3.3.0.3_20160517 —

References