CVE-2020-3933 - TAIWAN SECOM CO., LTD. - User Account Enumeration

Back Back to CVE browser

MEDIUM

TAIWAN SECOM CO., LTD. - User Account Enumeration

Published Feb 11, 2020

5.3

MEDIUM

CVSS 3.1

EPSS 1.24%

Description

TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, allows attackers to enumerate and exam user account in the system.

Affected products

Vendor Taiwan Secom Co., Ltd. Product Door Access Control system Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=3.3.2
Vendor Taiwan Secom Co., Ltd. Product Personnel Attendance system Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=3.3.0.3_20160517

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Taiwan Secom Co., Ltd.

Door Access Control system

n/a

Version	Status	Constraints
0	affected	<=3.3.2

Taiwan Secom Co., Ltd.

Personnel Attendance system

n/a

Version	Status	Constraints
0	affected	<=3.3.0.3_20160517

Remediation

Vendor solution

Update to: Door Access Control system ver. 3.5.4 Personnel Attendance system prior to ver. 3.4.0.0.3.05_20191112

Weaknesses (0)

No CWE recorded.

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25198
Advisory
https://gist.github.com/chtsecurity/4db471b34c3959e5ab9ec31570e4760b
x_refsource_MISCThird Party Advisory
https://www.chtsecurity.com/news/1bb85fcd-9048-4587-b4d3-b18335572bac
x_refsource_MISCThird Party Advisory
https://www.twcert.org.tw/en/cp-139-3317-d4edc-2.html
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25198		Advisory
https://gist.github.com/chtsecurity/4db471b34c3959e5ab9ec31570e4760b		x_refsource_MISCThird Party Advisory
https://www.chtsecurity.com/news/1bb85fcd-9048-4587-b4d3-b18335572bac		x_refsource_MISCThird Party Advisory
https://www.twcert.org.tw/en/cp-139-3317-d4edc-2.html		x_refsource_MISCThird Party Advisory