Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2023-38030

Saho ADM100&ADM-100FP - Execute Code

Saho’s attendance devices ADM100 and ADM-100FP have a vulnerability of missing authentication for critical functions. An unauthenticated remote attacker can execute system commands in partial website URLs to read sensitive device information without permissions.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Saho
Products
Adm-100 Adm-100 Firmware Adm-100fp and 1 more
CVE-2023-38029

Saho ADM100&ADM-100FP - Arbitrary File Upload

Saho’s attendance devices ADM100 and ADM-100FP has insufficient filtering for special characters and file type within their file uploading function. A unauthenticate remote attacker authenticated can upload and execute arbitrary files to perform arbitrary system commands or disrupt service.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Saho
Products
Adm-100 Adm-100 Firmware Adm-100fp and 1 more
CVE-2023-38028

Saho ADM100&ADM-100FP - Broken Access Control

Saho’s attendance devices ADM100 and ADM-100FP have insufficient authentication. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication to read system information and operate user's data, but can’t control system or disrupt service.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Saho
Products
Adm-100 Adm-100 Firmware Adm-100fp and 1 more