| |
Vulnerability CVE-2023-38029
Published: 2023-08-28
| Description: |
Saho??s attendance devices ADM100 and ADM-100FP has insufficient filtering for special characters and file type within their file uploading function. A unauthenticate remote attacker authenticated can upload and execute arbitrary files to perform arbitrary system commands or disrupt service.
|
Type:
CWE-434 (Unrestricted Upload of File with Dangerous Type)
References: |
https://www.twcert.org.tw/tw/cp-132-7336-35a94-1.html
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
