← CVE Intelligence

CVE-2023-38030

Saho ADM100&ADM-100FP - Execute Code PUBLISHED

Description (CNA)

Saho’s attendance devices ADM100 and ADM-100FP have a vulnerability of missing authentication for critical functions. An unauthenticated remote attacker can execute system commands in partial website URLs to read sensitive device information without permissions.

Affected (CNA)

Vendor / productVersions
Saho / ADM100affected 0.0.4.0; affected 0.0.4.3; affected 0.0.4.6; affected 0.0.4.8; affected Q20100602; affected T17041702; affected T18051803; affected T190
Saho / ADM-100FPaffected Q20100602; affected T17041702; affected T18051803; affected T190

CWE

CWE-306

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.