CVE-2023-38028
CVSS V2 None
CVSS V3 None
Description
Saho’s attendance devices ADM100 and ADM-100FP have insufficient authentication. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication to read system information and operate user's data, but can’t control system or disrupt service.
Overview
- CVE ID
- CVE-2023-38028
- Assigner
- twcert
- Vulnerability Status
- PUBLISHED
- Published Version
- 2023-08-28T04:12:44.854Z
- Last Modified Date
- 2023-08-28T04:12:44.854Z
Weakness Enumerations
References
| Reference URL | Reference Tags |
|---|---|
| https://www.twcert.org.tw/tw/cp-132-7335-d300a-1.html |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2023-38028 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38028 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2024-06-25 21:21:41 | Added to TrackCVE |