CVE-2023-38030 - Vulnerability Details - OpenCVE

Saho’s attendance devices ADM100 and ADM-100FP have a vulnerability of missing authentication for critical functions. An unauthenticated remote attacker can execute system commands in partial website URLs to read sensitive device information without permissions.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Saho	Adm-100 Adm-100 Firmware Adm-100fp Adm-100fp Firmware

Configuration 1 [-]

AND

OR	cpe:2.3:o:saho:adm-100_firmware:0.0.4.0:::::::*
	cpe:2.3:o:saho:adm-100_firmware:0.0.4.3:::::::*
	cpe:2.3:o:saho:adm-100_firmware:0.0.4.6:::::::*
	cpe:2.3:o:saho:adm-100_firmware:0.0.4.8:::::::*
	cpe:2.3:o:saho:adm-100_firmware:q20100602:::::::*
	cpe:2.3:o:saho:adm-100_firmware:t190:::::::*
	cpe:2.3:o:saho:adm-100_firmware:t17041702:::::::*
	cpe:2.3:o:saho:adm-100_firmware:t18051803:::::::*

cpe:2.3:h:saho:adm-100:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

OR	cpe:2.3:o:saho:adm-100fp_firmware:q20100602:::::::*
	cpe:2.3:o:saho:adm-100fp_firmware:t190:::::::*
	cpe:2.3:o:saho:adm-100fp_firmware:t17041702:::::::*
	cpe:2.3:o:saho:adm-100fp_firmware:t18051803:::::::*

cpe:2.3:h:saho:adm-100fp:-:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://www.twcert.org.tw/tw/cp-132-7337-501df-1.html

History

Thu, 03 Oct 2024 13:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: twcert

Published: 2023-08-28T06:44:16.870Z

Updated: 2024-10-03T12:58:30.760Z

Reserved: 2023-07-12T00:37:03.717Z

Link: CVE-2023-38030

Vulnrichment

Updated: 2024-08-02T17:30:12.343Z

NVD

Status : Modified

Published: 2023-08-28T07:15:09.513

Modified: 2024-11-21T08:12:42.547

Link: CVE-2023-38030

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-38030", "assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e", "state": "PUBLISHED", "assignerShortName": "twcert", "dateReserved": "2023-07-12T00:37:03.717Z", "datePublished": "2023-08-28T06:44:16.870Z", "dateUpdated": "2024-10-03T12:58:30.760Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "ADM100", "vendor": "Saho", "versions": [{"status": "affected", "version": "0.0.4.0"}, {"status": "affected", "version": "0.0.4.3"}, {"status": "affected", "version": "0.0.4.6"}, {"status": "affected", "version": "0.0.4.8"}, {"status": "affected", "version": "Q20100602"}, {"status": "affected", "version": "T17041702"}, {"status": "affected", "version": "T18051803"}, {"status": "affected", "version": "T190"}]}, {"defaultStatus": "unaffected", "product": "ADM-100FP", "vendor": "Saho", "versions": [{"status": "affected", "version": "Q20100602"}, {"status": "affected", "version": "T17041702"}, {"status": "affected", "version": "T18051803"}, {"status": "affected", "version": "T190"}]}], "datePublic": "2023-08-31T01:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "\n\n<span style=\"background-color: rgb(255, 255, 255);\">Saho\u2019s attendance devices ADM100 and ADM-100FP have a vulnerability of missing authentication for critical functions. An unauthenticated remote attacker can execute system commands in partial website URLs to read sensitive device information without permissions.</span>\n\n"}], "value": "\nSaho\u2019s attendance devices ADM100 and ADM-100FP have a vulnerability of missing authentication for critical functions. An unauthenticated remote attacker can execute system commands in partial website URLs to read sensitive device information without permissions.\n\n"}], "impacts": [{"capecId": "CAPEC-216", "descriptions": [{"lang": "en", "value": "CAPEC-216 Communication Channel Manipulation"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-306", "description": "CWE-306 Missing Authentication for Critical Function", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e", "shortName": "twcert", "dateUpdated": "2023-08-28T06:44:16.870Z"}, "references": [{"url": "https://www.twcert.org.tw/tw/cp-132-7337-501df-1.html"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "\n\n\n\n\n\nContact support from Saho.<br>"}], "value": "\n\n\n\n\nContact support from Saho.\n"}], "source": {"advisory": "TVN-202308010", "discovery": "EXTERNAL"}, "title": "Saho ADM100&ADM-100FP - Execute Code", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T17:30:12.343Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.twcert.org.tw/tw/cp-132-7337-501df-1.html", "tags": ["x_transferred"]}]}, {"affected": [{"vendor": "saho", "product": "adm-100_firmware", "cpes": ["cpe:2.3:o:saho:adm-100_firmware:0.0.4.0:*:*:*:*:*:*:*", "cpe:2.3:o:saho:adm-100_firmware:0.0.4.3:*:*:*:*:*:*:*", "cpe:2.3:o:saho:adm-100_firmware:0.0.4.6:*:*:*:*:*:*:*", "cpe:2.3:o:saho:adm-100_firmware:0.0.4.8:*:*:*:*:*:*:*", "cpe:2.3:o:saho:adm-100_firmware:q20100602:*:*:*:*:*:*:*", "cpe:2.3:o:saho:adm-100_firmware:t17041702:*:*:*:*:*:*:*", "cpe:2.3:o:saho:adm-100_firmware:t18051803:*:*:*:*:*:*:*", "cpe:2.3:o:saho:adm-100_firmware:t190:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0.0.4.0", "status": "affected"}, {"version": "0.0.4.3", "status": "affected"}, {"version": "0.0.4.6", "status": "affected"}, {"version": "0.0.4.8", "status": "affected"}, {"version": "q20100602", "status": "affected"}, {"version": "t17041702", "status": "affected"}, {"version": "t18051803", "status": "affected"}, {"version": "t190", "status": "affected"}]}, {"vendor": "saho", "product": "adm-100fp_firmware", "cpes": ["cpe:2.3:o:saho:adm-100fp_firmware:q20100602:*:*:*:*:*:*:*", "cpe:2.3:o:saho:adm-100fp_firmware:t17041702:*:*:*:*:*:*:*", "cpe:2.3:o:saho:adm-100fp_firmware:t18051803:*:*:*:*:*:*:*", "cpe:2.3:o:saho:adm-100fp_firmware:t190:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "q20100602", "status": "affected"}, {"version": "t17041702", "status": "affected"}, {"version": "t18051803", "status": "affected"}, {"version": "t190", "status": "affected"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-10-03T12:56:06.564999Z", "id": "CVE-2023-38030", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-03T12:58:30.760Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.twcert.org.tw/tw/cp-132-7337-501df-1.html", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T17:30:12.343Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-38030", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-10-03T12:56:06.564999Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:saho:adm-100_firmware:0.0.4.0:*:*:*:*:*:*:*", "cpe:2.3:o:saho:adm-100_firmware:0.0.4.3:*:*:*:*:*:*:*", "cpe:2.3:o:saho:adm-100_firmware:0.0.4.6:*:*:*:*:*:*:*", "cpe:2.3:o:saho:adm-100_firmware:0.0.4.8:*:*:*:*:*:*:*", "cpe:2.3:o:saho:adm-100_firmware:q20100602:*:*:*:*:*:*:*", "cpe:2.3:o:saho:adm-100_firmware:t17041702:*:*:*:*:*:*:*", "cpe:2.3:o:saho:adm-100_firmware:t18051803:*:*:*:*:*:*:*", "cpe:2.3:o:saho:adm-100_firmware:t190:*:*:*:*:*:*:*"], "vendor": "saho", "product": "adm-100_firmware", "versions": [{"status": "affected", "version": "0.0.4.0"}, {"status": "affected", "version": "0.0.4.3"}, {"status": "affected", "version": "0.0.4.6"}, {"status": "affected", "version": "0.0.4.8"}, {"status": "affected", "version": "q20100602"}, {"status": "affected", "version": "t17041702"}, {"status": "affected", "version": "t18051803"}, {"status": "affected", "version": "t190"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:saho:adm-100fp_firmware:q20100602:*:*:*:*:*:*:*", "cpe:2.3:o:saho:adm-100fp_firmware:t17041702:*:*:*:*:*:*:*", "cpe:2.3:o:saho:adm-100fp_firmware:t18051803:*:*:*:*:*:*:*", "cpe:2.3:o:saho:adm-100fp_firmware:t190:*:*:*:*:*:*:*"], "vendor": "saho", "product": "adm-100fp_firmware", "versions": [{"status": "affected", "version": "q20100602"}, {"status": "affected", "version": "t17041702"}, {"status": "affected", "version": "t18051803"}, {"status": "affected", "version": "t190"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-03T12:57:03.663Z"}}], "cna": {"title": "Saho ADM100&ADM-100FP - Execute Code", "source": {"advisory": "TVN-202308010", "discovery": "EXTERNAL"}, "impacts": [{"capecId": "CAPEC-216", "descriptions": [{"lang": "en", "value": "CAPEC-216 Communication Channel Manipulation"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Saho", "product": "ADM100", "versions": [{"status": "affected", "version": "0.0.4.0"}, {"status": "affected", "version": "0.0.4.3"}, {"status": "affected", "version": "0.0.4.6"}, {"status": "affected", "version": "0.0.4.8"}, {"status": "affected", "version": "Q20100602"}, {"status": "affected", "version": "T17041702"}, {"status": "affected", "version": "T18051803"}, {"status": "affected", "version": "T190"}], "defaultStatus": "unaffected"}, {"vendor": "Saho", "product": "ADM-100FP", "versions": [{"status": "affected", "version": "Q20100602"}, {"status": "affected", "version": "T17041702"}, {"status": "affected", "version": "T18051803"}, {"status": "affected", "version": "T190"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "\n\n\n\n\nContact support from Saho.\n", "supportingMedia": [{"type": "text/html", "value": "\n\n\n\n\n\nContact support from Saho.<br>", "base64": false}]}], "datePublic": "2023-08-31T01:00:00.000Z", "references": [{"url": "https://www.twcert.org.tw/tw/cp-132-7337-501df-1.html"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "\nSaho\u2019s attendance devices ADM100 and ADM-100FP have a vulnerability of missing authentication for critical functions. An unauthenticated remote attacker can execute system commands in partial website URLs to read sensitive device information without permissions.\n\n", "supportingMedia": [{"type": "text/html", "value": "\n\n<span style=\"background-color: rgb(255, 255, 255);\">Saho\u2019s attendance devices ADM100 and ADM-100FP have a vulnerability of missing authentication for critical functions. An unauthenticated remote attacker can execute system commands in partial website URLs to read sensitive device information without permissions.</span>\n\n", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-306", "description": "CWE-306 Missing Authentication for Critical Function"}]}], "providerMetadata": {"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e", "shortName": "twcert", "dateUpdated": "2023-08-28T06:44:16.870Z"}}}, "cveMetadata": {"cveId": "CVE-2023-38030", "state": "PUBLISHED", "dateUpdated": "2024-10-03T12:58:30.760Z", "dateReserved": "2023-07-12T00:37:03.717Z", "assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e", "datePublished": "2023-08-28T06:44:16.870Z", "assignerShortName": "twcert"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:saho:adm-100_firmware:0.0.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "51D8D874-7C51-41E7-9689-E795DE1360D3", "vulnerable": true}, {"criteria": "cpe:2.3:o:saho:adm-100_firmware:0.0.4.3:*:*:*:*:*:*:*", "matchCriteriaId": "50C72BE7-0E40-4F1A-86D6-15E8C78121C8", "vulnerable": true}, {"criteria": "cpe:2.3:o:saho:adm-100_firmware:0.0.4.6:*:*:*:*:*:*:*", "matchCriteriaId": "5EB5DA1F-3BED-4F23-9FA1-C65F6C59235B", "vulnerable": true}, {"criteria": "cpe:2.3:o:saho:adm-100_firmware:0.0.4.8:*:*:*:*:*:*:*", "matchCriteriaId": "BE08CF54-2259-40AF-B68C-F3498133F490", "vulnerable": true}, {"criteria": "cpe:2.3:o:saho:adm-100_firmware:q20100602:*:*:*:*:*:*:*", "matchCriteriaId": "28AF1652-9D3F-45F6-969D-FA0D7F688F12", "vulnerable": true}, {"criteria": "cpe:2.3:o:saho:adm-100_firmware:t190:*:*:*:*:*:*:*", "matchCriteriaId": "825B2F91-8AC9-4543-9BD8-26760B5F6587", "vulnerable": true}, {"criteria": "cpe:2.3:o:saho:adm-100_firmware:t17041702:*:*:*:*:*:*:*", "matchCriteriaId": "176C1D07-D975-4CF8-B54C-16366DF1C848", "vulnerable": true}, {"criteria": "cpe:2.3:o:saho:adm-100_firmware:t18051803:*:*:*:*:*:*:*", "matchCriteriaId": "BA65B75F-139F-4BC6-A5AB-EA74FFE5966A", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:saho:adm-100:-:*:*:*:*:*:*:*", "matchCriteriaId": "AA638ECA-B29C-415D-99E7-217D16473C37", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:saho:adm-100fp_firmware:q20100602:*:*:*:*:*:*:*", "matchCriteriaId": "D6612C85-1259-4435-BEB1-DC5ADC8D620D", "vulnerable": true}, {"criteria": "cpe:2.3:o:saho:adm-100fp_firmware:t190:*:*:*:*:*:*:*", "matchCriteriaId": "EC7D1DBE-4976-47A4-951B-39B5C9B8736A", "vulnerable": true}, {"criteria": "cpe:2.3:o:saho:adm-100fp_firmware:t17041702:*:*:*:*:*:*:*", "matchCriteriaId": "C9487774-CE30-4C04-B296-70B3A73225C7", "vulnerable": true}, {"criteria": "cpe:2.3:o:saho:adm-100fp_firmware:t18051803:*:*:*:*:*:*:*", "matchCriteriaId": "D0E10BD2-D64F-49F9-8409-A56AC2E0FD57", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:saho:adm-100fp:-:*:*:*:*:*:*:*", "matchCriteriaId": "295DF46C-15E0-47A3-8F21-A48F670C0496", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "\nSaho\u2019s attendance devices ADM100 and ADM-100FP have a vulnerability of missing authentication for critical functions. An unauthenticated remote attacker can execute system commands in partial website URLs to read sensitive device information without permissions.\n\n"}], "id": "CVE-2023-38030", "lastModified": "2024-11-21T08:12:42.547", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "twcert@cert.org.tw", "type": "Secondary"}]}, "published": "2023-08-28T07:15:09.513", "references": [{"source": "twcert@cert.org.tw", "tags": ["Third Party Advisory"], "url": "https://www.twcert.org.tw/tw/cp-132-7337-501df-1.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://www.twcert.org.tw/tw/cp-132-7337-501df-1.html"}], "sourceIdentifier": "twcert@cert.org.tw", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-306"}], "source": "twcert@cert.org.tw", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-306"}], "source": "nvd@nist.gov", "type": "Primary"}]}