CVE-2023-38029 : Saho’s attendance devices ADM100 and ADM-100FP has insufficient filtering for special characters and file type within

Saho’s attendance devices ADM100 and ADM-100FP has insufficient filtering for special characters and file type within their file uploading function. A unauthenticate remote attacker authenticated can upload and execute arbitrary files to perform arbitrary system commands or disrupt service.

Published 2023-08-28 06:15:08

Updated 2023-08-29 23:46:48

Source TWCERT/CC

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2023-38029

EPSS FAQ

0.24%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 63 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-38029

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	TWCERT/CC
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

References for CVE-2023-38029

https://www.twcert.org.tw/tw/cp-132-7336-35a94-1.html

TWCERT/CC台灣電腦網路危機處理暨協調中心|企業資安通報協處|資安情資分享|漏洞通報|資安聯盟|資安電子報-Saho商合行 ADM100 & ADM-100FP - Arbitrary File Upload
Third Party Advisory

Products affected by CVE-2023-38029

Saho » Adm-100 Firmware » Version: 0.0.4.0
cpe:2.3:o:saho:adm-100_firmware:0.0.4.0:*:*:*:*:*:*:*
Matching versions
When used together with: Saho » Adm-100 » Version: N/A
Saho » Adm-100 Firmware » Version: 0.0.4.3
cpe:2.3:o:saho:adm-100_firmware:0.0.4.3:*:*:*:*:*:*:*
Matching versions
When used together with: Saho » Adm-100 » Version: N/A
Saho » Adm-100 Firmware » Version: 0.0.4.6
cpe:2.3:o:saho:adm-100_firmware:0.0.4.6:*:*:*:*:*:*:*
Matching versions
When used together with: Saho » Adm-100 » Version: N/A
Saho » Adm-100 Firmware » Version: 0.0.4.8
cpe:2.3:o:saho:adm-100_firmware:0.0.4.8:*:*:*:*:*:*:*
Matching versions
When used together with: Saho » Adm-100 » Version: N/A
Saho » Adm-100 Firmware » Version: Q20100602
cpe:2.3:o:saho:adm-100_firmware:q20100602:*:*:*:*:*:*:*
Matching versions
When used together with: Saho » Adm-100 » Version: N/A
Saho » Adm-100 Firmware » Version: T190
cpe:2.3:o:saho:adm-100_firmware:t190:*:*:*:*:*:*:*
Matching versions
When used together with: Saho » Adm-100 » Version: N/A
Saho » Adm-100 Firmware » Version: T17041702
cpe:2.3:o:saho:adm-100_firmware:t17041702:*:*:*:*:*:*:*
Matching versions
When used together with: Saho » Adm-100 » Version: N/A
Saho » Adm-100 Firmware » Version: T18051803
cpe:2.3:o:saho:adm-100_firmware:t18051803:*:*:*:*:*:*:*
Matching versions
When used together with: Saho » Adm-100 » Version: N/A
Saho » Adm-100fp Firmware » Version: Q20100602
cpe:2.3:o:saho:adm-100fp_firmware:q20100602:*:*:*:*:*:*:*
Matching versions
When used together with: Saho » Adm-100fp » Version: N/A
Saho » Adm-100fp Firmware » Version: T190
cpe:2.3:o:saho:adm-100fp_firmware:t190:*:*:*:*:*:*:*
Matching versions
When used together with: Saho » Adm-100fp » Version: N/A
Saho » Adm-100fp Firmware » Version: T17041702
cpe:2.3:o:saho:adm-100fp_firmware:t17041702:*:*:*:*:*:*:*
Matching versions
When used together with: Saho » Adm-100fp » Version: N/A
Saho » Adm-100fp Firmware » Version: T18051803
cpe:2.3:o:saho:adm-100fp_firmware:t18051803:*:*:*:*:*:*:*
Matching versions
When used together with: Saho » Adm-100fp » Version: N/A

Vulnerability Details : CVE-2023-38029

Exploit prediction scoring system (EPSS) score for CVE-2023-38029

CVSS scores for CVE-2023-38029

CWE ids for CVE-2023-38029

References for CVE-2023-38029

Products affected by CVE-2023-38029