EUVD-2020-4977

Malware in sbrugna...

CVE-2020-12681

Missing TLS certificate validation on 3xLogic Infinias eIDC32 devices through 3.4.125 allows an attacker to intercept/control the channel by which door lock policies are applied...

CVE-2020-12681

Missing TLS certificate validation on 3xLogic Infinias eIDC32 devices through 3.4.125 allows an attacker to intercept/control the channel by which door lock policies are applied...

Design/Logic Flaw

Missing TLS certificate validation on 3xLogic Infinias eIDC32 devices through 3.4.125 allows an attacker to intercept/control the channel by which door lock policies are applied...

CVE-2020-12681

Missing TLS certificate validation on 3xLogic Infinias eIDC32 devices through 3.4.125 allows an attacker to intercept/control the channel by which door lock policies are applied...

CVE-2020-12681

The CVE-2020-12681 issue affects 3xLogic Infinias eIDC32 devices (through version 3.4.125). Root cause: missing TLS certificate validation, enabling an attacker to intercept or control the channel used to apply door lock policies. Impact, as stated, is the interception/control of policy applicati...

CVE-2020-12681: Improper Certificate Validation

Missing TLS certificate validation on 3xLogic Infinias eIDC32 devices through 3.4.125 allows an attacker to intercept/control the channel by which door lock policies are applied...

3xlogic 3xLogic Infinias eIDC32 信任管理问题漏洞

The 3xlogic 3xLogic Infinias eIDC32 is an access control controller from 3xLogic 3xlogic USA. A security vulnerability exists in the 3xLogic Infinias eIDC32, which allows an attacker to exploit the vulnerability to intercept channels that control the application of door locking policies...

PT-2021-9465

Name of the Vulnerable Software and Affected Versions 3xLogic Infinias eIDC32 devices through 3.4.125 Description The issue is related to missing TLS certificate validation, which allows an attacker to intercept or control the channel used for applying door lock policies. Recommendations For...

3xLogic Infinias eIDC32 Authorization Issues Vulnerability

The 3xLogic Infinias eIDC32 is an access control controller from 3xLogic USA. A security vulnerability exists in the 3xLOGIC Infinias eIDC32 Web version 1.107 using firmware version 32 2.213, which originates from the program's authentication via client-side parsing of the ＜KEY＞MYKEY＜/KEY＞ string...

CVE-2020-11542

3xLOGIC Infinias eIDC32 2.213 devices with Web 1.107 allow Authentication Bypass via CMD.HTM?CMD= because authentication depends on the client side's interpretation of the MYKEY substring...

CVE-2020-11542

3xLOGIC Infinias eIDC32 2.213 devices with Web 1.107 allow Authentication Bypass via CMD.HTM?CMD= because authentication depends on the client side's interpretation of the MYKEY substring...

CVE-2020-11542

3xLOGIC Infinias eIDC32 2.213 devices with Web 1.107 allow Authentication Bypass via CMD.HTM?CMD= because authentication depends on the client side's interpretation of the MYKEY substring...

CVE-2020-11542

The connected documents provide concrete details for CVE-2020-11542 affecting 3xLOGIC Infinias eIDC32 Web version 1.107 with firmware 32 2.213. The root cause is authentication relying on client-side parsing of the MYKEY string, enabling an Authentication Bypass via CMD.HTM?CMD= without requiring...

PT-2020-12678

Name of the Vulnerable Software and Affected Versions 3xLOGIC Infinias eIDC32 version 2.213 Description The issue allows authentication bypass via the CMD.HTM endpoint, specifically when the CMD parameter is used, because authentication relies on the client-side interpretation of the MYKEY...

CVE-2020-11542: Improper Authentication

3xLOGIC Infinias eIDC32 2.213 devices with Web 1.107 allow Authentication Bypass via CMD.HTM?CMD= because authentication depends on the client side's interpretation of the MYKEY substring...