VYPR
← All advisories
High severity7.5NVD Advisory· Published Aug 28, 2023· Updated Jun 17, 2026

CVE-2023-38030

CVE-2023-38030

Description

Saho’s attendance devices ADM100 and ADM-100FP have a vulnerability of missing authentication for critical functions. An unauthenticated remote attacker can execute system commands in partial website URLs to read sensitive device information without permissions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

15
  • Saho/Adm 100 Firmware8 versions
    cpe:2.3:o:saho:adm-100_firmware:0.0.4.0:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:o:saho:adm-100_firmware:0.0.4.0:*:*:*:*:*:*:*
    • cpe:2.3:o:saho:adm-100_firmware:0.0.4.3:*:*:*:*:*:*:*
    • cpe:2.3:o:saho:adm-100_firmware:0.0.4.6:*:*:*:*:*:*:*
    • cpe:2.3:o:saho:adm-100_firmware:0.0.4.8:*:*:*:*:*:*:*
    • cpe:2.3:o:saho:adm-100_firmware:q20100602:*:*:*:*:*:*:*
    • cpe:2.3:o:saho:adm-100_firmware:t17041702:*:*:*:*:*:*:*
    • cpe:2.3:o:saho:adm-100_firmware:t18051803:*:*:*:*:*:*:*
    • cpe:2.3:o:saho:adm-100_firmware:t190:*:*:*:*:*:*:*
  • Saho/Adm 100fp Firmware4 versions
    cpe:2.3:o:saho:adm-100fp_firmware:q20100602:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:saho:adm-100fp_firmware:q20100602:*:*:*:*:*:*:*
    • cpe:2.3:o:saho:adm-100fp_firmware:t17041702:*:*:*:*:*:*:*
    • cpe:2.3:o:saho:adm-100fp_firmware:t18051803:*:*:*:*:*:*:*
    • cpe:2.3:o:saho:adm-100fp_firmware:t190:*:*:*:*:*:*:*
  • Saho/ADM100llm-fuzzy
  • Saho/Adm 100fpllm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: Q20100602

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.