CVE-2019-5964

iDoors Reader 2.10.17 and earlier allows an attacker on the same network segment to bypass authentication to access the management console and operate the product via unspecified vectors.

Score

CVSS 3.0 8.8 High

Status

Modified - vultures@jpcert.or.jp

Published

2019-07-05

Last modified

2024-08-04

Weaknesses

CWE-287

Affected products

• Idoors Reader (A.t.works Inc.)
• Idoors Reader (Idoors)

References

• https://idoors.jp/info/20190701
• https://jvn.jp/en/jp/JVN28218613/index.html