CVE-2023-38030: Missing Authentication for Critical Function

Saho’s attendance devices ADM100 and ADM-100FP have a vulnerability of missing authentication for critical functions. An unauthenticated remote attacker can execute system commands in partial website URLs to read sensitive device information without permissions...

PT-2023-8673

Name of the Vulnerable Software and Affected Versions Saho ADM100 and ADM-100FP affected versions not specified Description The issue is related to insufficient filtering for special characters and file types within the file uploading function of Saho's attendance devices. This allows a remote...