CVE-2021-35962: Secom Door Access Control

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

Specific page parameters in Dr. ID Door Access Control and Personnel Attendance Management system does not filter special characters. Remote attackers can apply Path Traversal means to download credential files from the system without permission.

Affected products

• Secom Door Access Control: up to and including 3.3.2
• Secom Personnel Attendance System: up to and including 3.4.0.0.3.12_20210525

Published 2021-07-16. Last modified 2026-06-17.