Saho’s attendance devices ADM100 and ADM-100FP have a vulnerability of missing authentication for critical functions. An unauthenticated remote attacker can execute system commands in partial website URLs to read sensitive device information without permissions.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Saho | ADM100 | unaffected |
|
|||||||||||||||||||||||||||
| Saho | ADM-100FP | unaffected |
|
Configuration 1 [-]
| AND |
|
Configuration 2 [-]
| AND |
|
No data.
No data available yet.
Vendor Solution
Contact support from Saho.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2023-41857 | Saho’s attendance devices ADM100 and ADM-100FP have a vulnerability of missing authentication for critical functions. An unauthenticated remote attacker can execute system commands in partial website URLs to read sensitive device information without permissions. |
| Link | Providers |
|---|---|
| https://www.twcert.org.tw/tw/cp-132-7337-501df-1.html |
|
Thu, 03 Oct 2024 13:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: twcert
Published:
Updated: 2024-10-03T12:58:30.760Z
Reserved: 2023-07-12T00:37:03.717Z
Link: CVE-2023-38030
Vulnrichment
Updated: 2024-08-02T17:30:12.343Z
NVD
Status : Modified
Published: 2023-08-28T07:15:09.513
Modified: 2024-11-21T08:12:42.547
Link: CVE-2023-38030
Redhat
No data.
OpenCVE Enrichment
No data.