CVE-2017-20038

Name of the Vulnerable Software and Affected Versions SICUNET Access Controller version 0.32-05z

Description A critical issue was found in the software, affecting some unknown functionality of the file card scan decoder.php. The manipulation of the No/door argument leads to privilege escalation. The attack can be launched remotely.

Recommendations For SICUNET Access Controller version 0.32-05z, consider restricting access to the card scan decoder.php file and limiting the manipulation of the No/door argument to prevent privilege escalation until a patch is available.