← CVE Intelligence

CVE-2023-38028

Saho ADM100&ADM-100FP - Broken Access Control PUBLISHED

Description (CNA)

Saho’s attendance devices ADM100 and ADM-100FP have insufficient authentication. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication to read system information and operate user's data, but can’t control system or disrupt service.

Affected (CNA)

Vendor / productVersions
Saho / ADM100affected 0.0.4.0; affected 0.0.4.3; affected 0.0.4.6; affected 0.0.4.8; affected Q20100602; affected T17041702; affected T18051803; affected T190
Saho / ADM-100FPaffected Q20100602; affected T17041702; affected T18051803; affected T190

CWE

CWE-306

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.