Criminals could waltz into secure zones in airports and government facilities by hacking and jamming open doors from remote computers over the Internet, DVLabs researcher Ricky Lawshae says.

The since-patched vulnerabilities affect HID's flagship VertX and Edge controllers which are distributed in scores of busy locations and large global enterprises.

...

All it takes Lawshae says is "a few simple UDP packets" for the "potentially devastating bug" to be exploited. Authentication is not required.

Lawshae says the attacks, which can open every door in a building, are possible because of a command injection vulnerability in a LED blinking lights service.