Saho

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Saho records in CISA KEV

No Saho vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2023-19454 CVE-2023-38029 · GHSA-mfff-pgww-wxxm

MEDIUM 51

Saho’s attendance devices ADM100 and ADM-100FP has insufficient filtering for special characters and file type within their file uploading function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01023 Published 2023-08-28 No fix listed CWE-434

TI-2023-19453 CVE-2023-38028 · GHSA-gh74-f566-4j95

MEDIUM 49

Saho’s attendance devices ADM100 and ADM-100FP have insufficient authentication.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00884 Published 2023-08-28 No fix listed CWE-306

TI-2023-19455 CVE-2023-38030 · GHSA-jq7p-vh37-wmgw

MEDIUM 40

Saho’s attendance devices ADM100 and ADM-100FP have a vulnerability of missing authentication for critical functions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00822 Published 2023-08-28 No fix listed CWE-306