Saho ADM-100fp Firmware T18051803
Approved changes feed: RSS · Atom
cpe:2.3:o:saho:adm-100fp_firmware:t18051803:*:*:*:*:*:*:*
part: o version: t18051803 update: *
| Vendor | Saho (1754b9dd-0daa-5f33-bd2a-a5755e12b216) |
|---|---|
| Product | Adm 100Fp Firmware (0bc64488-0ffb-5cd5-87f8-946ca76240e6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-38030 |
vulnerable | 2026-06-08 06:08:16.743581 |
Saho ADM100&ADM-100FP - Execute Code
HIGH (7.5)
Saho’s attendance devices ADM100 and ADM-100FP have a vulnerability of missing authentication for critical functions. An unauthenticated remote attacker can execute system commands in partial website URLs to read sensitive device information without permissions.
Published: 2023-08-28T06:44:16.870Z
Updated: 2024-10-03T12:58:30.760Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38029 |
vulnerable | 2026-06-08 06:08:16.742343 |
Saho ADM100&ADM-100FP - Arbitrary File Upload
CRITICAL (9.8)
Saho’s attendance devices ADM100 and ADM-100FP has insufficient filtering for special characters and file type within their file uploading function. A unauthenticate remote attacker authenticated can upload and execute arbitrary files to perform arbitrary system commands or disrupt service.
Published: 2023-08-28T05:59:47.039Z
Updated: 2024-10-03T16:16:59.825Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38028 |
vulnerable | 2026-06-08 06:08:16.737970 |
Saho ADM100&ADM-100FP - Broken Access Control
CRITICAL (9.1)
Saho’s attendance devices ADM100 and ADM-100FP have insufficient authentication. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication to read system information and operate user's data, but can’t control system or disrupt service.
Published: 2023-08-28T04:12:44.854Z
Updated: 2024-10-03T16:12:23.404Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.