Assaabloy vulnerabilities

Products

• Control Id Idsecure 9
• Control Id Rhid 2

Newest

• assa abloy visionline Local Privilege Escalation Due to Writable Executable in Privileged Visionline Service Path CVE-2026-3315 5.8 MediumMarch 10, 2026
• controlid idsecure on-premises, assaabloy control id idsecure +1 more Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in ControlID iDSecure On-premises CVE-2025-49853 9.3 CriticalJune 24, 2025
• controlid idsecure on-premises, assaabloy control id idsecure +1 more Server-Side Request Forgery (SSRF) in ControlID iDSecure On-premises CVE-2025-49852 8.7 HighJune 24, 2025
• controlid idsecure on-premises, assaabloy control id idsecure +1 more Improper Authentication in ControlID iDSecure On-premises CVE-2025-49851 8.7 HighJune 24, 2025
• control id rh id, assaabloy control id rhid +1 more Control iD RH iD PDF Document companyId resource injection CVE-2025-2125 5.3 MediumMarch 9, 2025
• assaabloy yale keyless smart lock firmware Weak encryption mechanisms in RFID Tags in Yale Keyless Lock v1.0 allows attackers to create a... CVE-2023-26943 6.5 MediumDecember 4, 2023
• assaabloy yale ia-210 firmware Weak encryption mechanisms in RFID Tags in Yale IA-210 Alarm v1.0 allows attackers to create a... CVE-2023-26942 6.5 MediumDecember 4, 2023
• assaabloy yale conexis l1 firmware Weak encryption mechanisms in RFID Tags in Yale Conexis L1 v1.1.0 allows attackers to create a... CVE-2023-26941 6.5 MediumDecember 4, 2023
• assaabloy control id gerencia web, control id gerencia web +1 more Control iD Gerencia Web Cookie cleartext storage CVE-2023-4392 3.7 LowAugust 17, 2023
• assaabloy control id idsecure A SQL injection vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing... CVE-2023-33367 9.8 CriticalAugust 5, 2023
• assaabloy control id idsecure Control ID IDSecure 4.7.26.0 and prior uses a hardcoded cryptographic key in order to sign and... CVE-2023-33371 9.8 CriticalAugust 3, 2023
• assaabloy control id idsecure An uncaught exception vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing... CVE-2023-33370 7.5 HighAugust 3, 2023
• assaabloy control id idsecure A path traversal vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing... CVE-2023-33369 9.1 CriticalAugust 3, 2023
• assaabloy control id idsecure Some API routes exists in Control ID IDSecure 4.7.26.0 and prior, exfiltrating sensitive... CVE-2023-33368 6.5 MediumAugust 3, 2023
• assaabloy control id idsecure, control id idsecure +1 more Control iD iDSecure Dispositivos Page cross site scripting CVE-2023-2044 3.5 LowApril 14, 2023
• assaabloy control id rhid, control id rhid +1 more Control iD RHiD Edit a sql injection CVE-2023-2043 6.3 MediumApril 14, 2023
• assaabloy yale wipc-303w firmware The Yale WIPC-303W 2.21 through 2.31 camera is vulnerable to remote command execution (RCE)... CVE-2020-23826 Disputed EPSS 13.2% 8.8 HighJanuary 22, 2021
• assaabloy yale wipc-301w firmware ASSA ABLOY Yale WIPC-301W 2.x.2.29 through 2.x.2.43_p1 devices allow Eval Injection of commands. CVE-2020-10176 9.8 CriticalMay 7, 2020
• assaabloy hid digitalpersona 4500 firmware There is a short key vulnerability in HID Global DigitalPersona (formerly Crossmatch) U.are.U... CVE-2019-13604 5.9 MediumJuly 15, 2019