Secom

Secom develops a specialized portfolio of physical access control and personnel attendance systems, including the DR.ID product line, that manage entry points and identity verification in facilities worldwide. Vulnerabilities affecting this vendor skew strongly toward critical severity and cluster around foundational authentication and data-storage weaknesses—SQL injection, hard-coded credentials, cleartext credential storage, and path traversal—that are endemic to legacy access-control platforms and reflect insufficient input validation and secrets management. Defenders should prioritize patches for this vendor's access-control appliances, particularly those internet-exposed or managing high-security facilities; live severity and exploitation counts are shown alongside this summary.