Secom vulnerabilities
We track 5 vulnerabilities in Secom products across 7 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on October 18, 2024.
Latest Secom vulnerabilities
- 9.8 Critical severity
WRTM326: Improper Neutralization of Special Elements used in an OS Command
The wireless router WRTM326 from SECOM does not properly validate a specific parameter. An unauthenticated remote attacker could execute arbitrary system commands by sending crafted requests.
- 9.8 Critical severity
WRTR-304GN-304TW-UPSC: Improper Neutralization of Special Elements used in an OS Command
SECOM WRTR-304GN-304TW-UPSC does not properly filter user input in the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.
- 9.8 Critical severity
Dr.ID Attendance system: Improper Neutralization of Special Elements used in an SQL Command
Dr.ID Access Control System from SECOM does not properly validate a specific page parameter, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database contents.
- 9.8 Critical severity
Dr.ID Access control system: Improper Neutralization of Special Elements used in an SQL Command
Dr.ID Access Control System from SECOM does not properly validate a specific page parameter, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database contents.
- 7.3 High severity
Personnel Attendance Management system: Use of Hard-coded Credentials
Taiwan Secom Dr.ID Access Control system’s login page has a hard-coded credential in the source code. An unauthenticated remote attacker can use the hard-coded credential to acquire partial system information and modify system setting to cause partial disrupt