← CVE Intelligence

CVE-2023-38029

Saho ADM100&ADM-100FP - Arbitrary File Upload PUBLISHED

Description (CNA)

Saho’s attendance devices ADM100 and ADM-100FP has insufficient filtering for special characters and file type within their file uploading function. A unauthenticate remote attacker authenticated can upload and execute arbitrary files to perform arbitrary system commands or disrupt service.

Affected (CNA)

Vendor / productVersions
Saho / ADM100affected 0.0.4.0; affected 0.0.4.3; affected 0.0.4.6; affected 0.0.4.8; affected Q20100602; affected T17041702; affected T18051803; affected T190
Saho / ADM-100FPaffected Q20100602; affected T17041702; affected T18051803; affected T190

CWE

CWE-434

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.