中文

// CVE · PUBLISHED 2023-08-28

CVE-2023-38029

Saho / ADM100 · Saho / ADM-100FP · saho / adm-100_firmware · +1

9.8 · CVSS 3.1Critical

Description

Saho’s attendance devices ADM100 and ADM-100FP has insufficient filtering for special characters and file type within their file uploading function. A unauthenticate remote attacker authenticated can upload and execute arbitrary files to perform arbitrary system commands or disrupt service.

References

Related CVEs

  • CVE-2023-29073Autodesk / AutoCAD, Advance Steel and Civil 3DCVSS 9.8
  • CVE-2023-36049Microsoft / Microsoft Visual Studio 2022 version 17.2 · +18CVSS 9.8
  • CVE-2023-3961Red Hat / Red Hat Enterprise Linux 8 · +9CVSS 9.8
  • CVE-2023-4911Red Hat / Red Hat Enterprise Linux 8 · +10KEVCVSS 7.8
  • CVE-2023-4344Broadcom / LSI Storage Authority (LSA) · +1CVSS 9.8
  • CVE-2023-4342Broadcom / LSI Storage Authority (LSA) · +1CVSS 9.8
  • CVE-2023-4341Broadcom / LSI Storage Authority (LSA) · +1CVSS 9.8
  • CVE-2023-4340Broadcom / LSI Storage Authority (LSA) · +1CVSS 9.8

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.