Vulnerability Found in Two Keyless Entry Locks

Researchers at Dell Secureworks are warning a vulnerability in two keyless entry products could allow local attackers to lock and unlock doors and create illegitimate RFID badges by sending unauthenticated requests to affected devices. Impacted are two AMAG Technology Symmetry IP-based access doo...

CVE-2017-16241

The CVE affects AMAG Symmetry EN-1DBC/EN-2DBC door controllers. Root cause is improper access control allowing unauthenticated, network-based requests (via Serial over TCP/IP) to execute door commands (lock/unlock) and inject RFID values. Impact is remote control of doors and credential manipulat...

CVE-2017-16241

Incorrect access control in AMAG Symmetry Door Edge Network Controllers EN-1DBC Boot App 23611 03.60 and STD App 23603 03.60; EN-2DBC Boot App 24451 01.00 and STD App 2461 01.00 enables remote attackers to execute door controller commands e.g., lock, unlock, add ID card value by sending...