CVE-2014-2938

Hanvon FaceID before 1.007.110 does not require authentication, which allows remote attackers to modify access-control and attendance-tracking data via API commands...

CVE-2014-2938

Hanvon FaceID devices running software versions before 1.007.110 are affected by an authentication flaw that allows an unauthenticated remote attacker to modify user and access-control data via the device’s API/management protocol (port 9922/tcp). Root cause: missing authentication for critical f...