İçeriğe atla
Noroxi

assaabloy kayıtları

assaabloy üreticisine ait 19 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 20
  3. 21
  4. 23
  5. 25
  6. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Bug bounty kapsamı

Ürünün üreticisi herkese açık bir programda görünüyor. Eşleşme ad üzerinden yapıldı; kapsam metnini programda doğrulayın.

Tüm kayıtlar

19 kayıt
  • CVE-2020-10176
    40Planlayın

    ASSA ABLOY Yale WIPC-301W 2.x.2.29 through 2.x.2.43_p1 devices allow Eval Injection of commands.

    KritikCVSS 9,8İstismar yokEPSS %2

    assaabloy · yale wipc-301w firmware7 May 2020

  • CVE-2020-23826
    39İzleyin

    The Yale WIPC-303W 2.21 through 2.31 camera is vulnerable to remote command execution (RCE) through command injection via the HTTP API.

    YüksekCVSS 8,8İstismar yokEPSS %13

    assaabloy · yale wipc-303w firmware26 Oca 2021

  • CVE-2023-33367
    39İzleyin

    A SQL injection vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing unauthenticated attackers to write PHP files on the

    KritikCVSS 9,8İstismar yokEPSS %1

    assaabloy · control id idsecure4 Ağu 2023

  • CVE-2023-33371
    39İzleyin

    Control ID IDSecure 4.7.26.0 and prior uses a hardcoded cryptographic key in order to sign and verify JWT session tokens, allowing attackers

    KritikCVSS 9,8İstismar yokEPSS %1

    assaabloy · control id idsecure2 Ağu 2023

  • CVE-2023-2043
    39İzleyin

    Control iD RHiD Edit a sql injection

    KritikCVSS 9,8İstismar yokEPSS %1

    assaabloy · control id rhid14 Nis 2023

  • CVE-2025-49853
    37İzleyin

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in ControlID iDSecure On-premises

    KritikCVSS 9,3İstismar yokEPSS %0

    assaabloy · control id idsecure24 Haz 2025

  • CVE-2023-33369
    36İzleyin

    A path traversal vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing attackers to delete arbitrary files on IDSecure fi

    KritikCVSS 9,1İstismar yokEPSS %1

    assaabloy · control id idsecure2 Ağu 2023

  • CVE-2025-49851
    34İzleyin

    Improper Authentication in ControlID iDSecure On-premises

    YüksekCVSS 8,7İstismar yokEPSS %1

    assaabloy · control id idsecure24 Haz 2025

  • CVE-2025-49852
    34İzleyin

    Server-Side Request Forgery (SSRF) in ControlID iDSecure On-premises

    YüksekCVSS 8,7İstismar yokEPSS %0

    assaabloy · control id idsecure24 Haz 2025

  • CVE-2023-33370
    30İzleyin

    An uncaught exception vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing attackers to cause the main web server of IDS

    YüksekCVSS 7,5İstismar yokEPSS %1

    assaabloy · control id idsecure2 Ağu 2023

  • CVE-2023-33368
    26İzleyin

    Some API routes exists in Control ID IDSecure 4.7.26.0 and prior, exfiltrating sensitive information and passwords to users accessing these

    OrtaCVSS 6,5İstismar yokEPSS %1

    assaabloy · control id idsecure2 Ağu 2023

  • CVE-2023-26943
    26İzleyin

    Weak encryption mechanisms in RFID Tags in Yale Keyless Lock v1.0 allows attackers to create a cloned tag via physical proximity to the orig

    OrtaCVSS 6,5İstismar yokEPSS %0

    assaabloy · yale keyless smart lock firmware4 Ara 2023

  • CVE-2023-26942
    26İzleyin

    Weak encryption mechanisms in RFID Tags in Yale IA-210 Alarm v1.0 allows attackers to create a cloned tag via physical proximity to the orig

    OrtaCVSS 6,5İstismar yokEPSS %0

    assaabloy · yale ia-210 firmware4 Ara 2023

  • CVE-2023-26941
    26İzleyin

    Weak encryption mechanisms in RFID Tags in Yale Conexis L1 v1.1.0 allows attackers to create a cloned tag via physical proximity to the orig

    OrtaCVSS 6,5İstismar yokEPSS %0

    assaabloy · yale conexis l1 firmware4 Ara 2023

  • CVE-2023-2044
    24İzleyin

    Control iD iDSecure Dispositivos Page cross site scripting

    OrtaCVSS 6,1İstismar yokEPSS %0

    assaabloy · control id idsecure14 Nis 2023

  • CVE-2019-13604
    23İzleyin

    There is a short key vulnerability in HID Global DigitalPersona (formerly Crossmatch) U.are.U 4500 Fingerprint Reader v24.

    OrtaCVSS 5,9İstismar yokEPSS %1

    assaabloy · hid digitalpersona 4500 firmware15 Tem 2019

  • CVE-2026-3315
    23İzleyin

    Local Privilege Escalation Due to Writable Executable in Privileged Visionline Service Path

    OrtaCVSS 5,8İstismar yokEPSS %0

    assaabloy · visionline10 Mar 2026

  • CVE-2023-4392
    21İzleyin

    Control iD Gerencia Web Cookie cleartext storage

    OrtaCVSS 5,3İstismar yokEPSS %1

    assaabloy · control id gerencia web16 Ağu 2023

  • CVE-2025-2125
    21İzleyin

    Control iD RH iD PDF Document companyId resource injection

    OrtaCVSS 5,3İstismar yokEPSS %0

    assaabloy · control id rhid9 Mar 2025