Authentication bypass using an alternate path or channel in iDoors Reader - CVE-2019-5964

The vulnerability allows an attacker to operate the product.

The vulnerability exist due to improper implementation of the authentication process. An attacker on the local network can bypass authentication process and gain unrestricted access to  management console.

Successful exploitation of the vulnerability may allow an attacker to change the device settings, reset the administrator account, and use the management screen.

To get an updated version, please contact a vendor at the following email address:

sales2@atworks.co.jp