CVE-2014-2938

Hanvon FaceID devices running software versions before 1.007.110 are affected by an authentication flaw that allows an unauthenticated remote attacker to modify user and access-control data via the device’s API/management protocol (port 9922/tcp). Root cause: missing authentication for critical f...