Saho’s attendance devices ADM100 and ADM-100FP has insufficient filtering for special characters and file type within their file uploading function. A unauthenticate remote attacker authenticated can upload and execute arbitrary files to perform arbitrary system commands or disrupt service.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Saho | ADM100 | unaffected |
|
|||||||||||||||||||||||||||
| Saho | ADM-100FP | unaffected |
|
Configuration 1 [-]
| AND |
|
Configuration 2 [-]
| AND |
|
No data.
No data available yet.
Vendor Solution
Contact support from Saho.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2023-41856 | Saho’s attendance devices ADM100 and ADM-100FP has insufficient filtering for special characters and file type within their file uploading function. A unauthenticate remote attacker authenticated can upload and execute arbitrary files to perform arbitrary system commands or disrupt service. |
| Link | Providers |
|---|---|
| https://www.twcert.org.tw/tw/cp-132-7336-35a94-1.html |
|
Thu, 03 Oct 2024 17:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: twcert
Published:
Updated: 2024-10-03T16:16:59.825Z
Reserved: 2023-07-12T00:37:03.717Z
Link: CVE-2023-38029
Vulnrichment
Updated: 2024-08-02T17:23:27.907Z
NVD
Status : Modified
Published: 2023-08-28T06:15:07.857
Modified: 2024-11-21T08:12:42.400
Link: CVE-2023-38029
Redhat
No data.
OpenCVE Enrichment
No data.