Title: SOCA Access Control System 180612 SQL Injection And Authentication Bypass
Advisory ID: ZSL-2019-5519
Impact: Exposure of System Information, Exposure of Sensitive Information, Manipulation of Data
Release Date: 13.05.2019
The company's products include proximity and fingerprint access control system, time and attendance, electric locks, card reader and writer, keyless entry system and other 30 specialized products. All products are attractively designed with advanced technology in accordance with users' safety and convenience which also fitted international standard.
The Soca web access control system suffers from multiple SQL Injection vulnerabilities. Input passed via multiple POST parameters is not properly sanitised before being returned to the user or used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code and bypass the authentication mechanism. It allows the attacker to remotely disclose password hashes and login with MD5 hash with highest privileges resulting in unlocking doors and bypass the physical access control in place.
SOCA Technology Co., Ltd - <http://www.socatech.com>
Windows NT 6.1 build 7601 (Windows 7 Service Pack 1) i586
Windows NT 6.2 build 9200 (Windows Server 2012 Standard Edition) i586
Vulnerability discovered by Gjoko Krstic - <email@example.com>
[13.05.2019] - Initial release
[15.05.2019] - Added reference 
Zero Science Lab
REQUEST LIMIT REACHED