JVN#28218613: The management console of iDoors Reader vulnerable to authentication bypass

The management console of iDoors Reader provided by A.T.WORKS, Inc. contains an authentication bypass vulnerability (CWE-288).

Impact

An attacker in the same segment may access the management console and operate the product.

Solution

Update the Firmware
Apply the firmware update according to the information provided by the developer.

Products Affected

• iDoors Reader 2.10.17 and earlier
  According to the developer, the management console of iDoors Cloud is not affected by this vulnerability.