VYPR
Unrated severityNVD Advisory· Published Aug 28, 2023· Updated Oct 3, 2024

Saho ADM100&ADM-100FP - Execute Code

CVE-2023-38030

Description

Saho’s attendance devices ADM100 and ADM-100FP have a vulnerability of missing authentication for critical functions. An unauthenticated remote attacker can execute system commands in partial website URLs to read sensitive device information without permissions.

Affected products

1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.