a
assaabloy
Security Risk Profile
54
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 19 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 15, 2019 to present
19
Total CVEs
10
Critical+High
0
Exploited
7
Unpatched
Threat Assessment
Avg CVSS
7.7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
7
Critical/High
Risk Level
54/100
medium
Severity Distribution
Critical
7High
3Medium
9Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
SQL Injection
3
2
Weak Encryption
3
3
SSRF
1
4
Path Traversal
1
5
XSS
1
Most Affected Products
1. Assaabloy Control Id Idsecure11
2. : ControlID iDSecure On-premises3
3. Assaabloy Yale Wipc-301w Firmware3
4. Controlid iDSecure On-premises2
5. Assaabloy Control Id Rhid2
Recent Vulnerabilities
See more →CVE-2026-3315
CVSS 5.8EPSS 0%medium
Local Privilege Escalation Due to Writable Executable in Privileged Visionline Service Path
Mar 10, 2026🔧 No Patch
CVE-2025-49853
CVSS 9.3critical
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in ControlID iDSecure On-premises
Jun 24, 2025
CVE-2025-49852
CVSS 8.7high
Server-Side Request Forgery (SSRF) in ControlID iDSecure On-premises
Jun 24, 2025
CVE-2025-49851
CVSS 9.8critical
Improper Authentication in ControlID iDSecure On-premises
Jun 24, 2025
CVE-2025-2125
CVSS 5.3medium
Control iD RH iD PDF Document companyId resource injection
Mar 9, 2025🔧 No Patch
CVE-2023-26941
CVSS 6.5medium
Dec 4, 2023🔧 No Patch
CVE-2023-26942
CVSS 6.5medium
Dec 4, 2023🔧 No Patch
CVE-2023-26943
CVSS 6.5medium
Dec 4, 2023🔧 No Patch
CVE-2023-4392
CVSS 5.3medium
Control iD Gerencia Web Cookie cleartext storage
Aug 17, 2023🔧 No Patch
CVE-2023-33367
CVSS 9.8critical
Aug 5, 2023🔧 No Patch
Monitor assaabloy in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.