CVE-2021-35961: TAIWAN SECOM CO., LTD., Door Access Control and Personnel Attendance Management system - Use of Hard-coded Credentials

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-07-16 · updated 2026-06-17
Weakness: CWE-798

Description

Dr. ID Door Access Control and Personnel Attendance Management system uses the hard-code admin default credentials that allows remote attackers to access the system through the default password and obtain the highest permission.

Affected products

TAIWAN SECOM CO., LTD., Door Access Control and Personnel Attendance Management system: before 3.4.0.0.3.12_20210525 — fixed in 3.4.0.0.3.12_20210525

How to fix

Upgrade to a fixed version: TAIWAN SECOM CO., LTD., Door Access Control and Personnel Attendance Management system 3.4.0.0.3.12_20210525. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2021-35961 or the next vulnerability affects your stack