CVE-2019-5964

Published: Jul 5, 2019Modified: Jun 17, 2026

8.8

Vector

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

iDoors Reader 2.10.17 and earlier allows an attacker on the same network segment to bypass authentication to access the management console and operate the product via unspecified vectors.

Affected (1)

Products: Idoors: Idoors Reader

Idoors

1 product

Idoors Reader

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Idoors Idoors Reader	Up to 2.10.17

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (4)

https://idoors.jp/info/20190701

Source: vultures@jpcert.or.jp

Vendor Advisory

https://jvn.jp/en/jp/JVN28218613/index.html

Source: vultures@jpcert.or.jp

Third Party Advisory

https://idoors.jp/info/20190701

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://jvn.jp/en/jp/JVN28218613/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.