CVE-2021-35961: Secom Dr.id Access Control

Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days.

Dr. ID Door Access Control and Personnel Attendance Management system uses the hard-code admin default credentials that allows remote attackers to access the system through the default password and obtain the highest permission.

Affected products

• Secom Dr.id Access Control: before 3.4.0.0.3.12_20210525 (fixed in 3.4.0.0.3.12_20210525)

Published 2021-07-16. Last modified 2026-06-17.