Saho vulnerabilities
We track 3 vulnerabilities in Saho products across 4 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 28, 2023.
Latest Saho vulnerabilities
- 7.5 High severity
ADM100: Missing Authentication for Critical Functionality
Saho’s attendance devices ADM100 and ADM-100FP have a vulnerability of missing authentication for critical functions. An unauthenticated remote attacker can execute system commands in partial website URLs to read sensitive device information without permission
- 9.8 Critical severity
ADM100: Unrestricted Upload of File with Dangerous Type
Saho’s attendance devices ADM100 and ADM-100FP has insufficient filtering for special characters and file type within their file uploading function. A unauthenticate remote attacker authenticated can upload and execute arbitrary files to perform arbitrary syst
- 9.1 Critical severity
ADM100: Missing Authentication for Critical Functionality
Saho’s attendance devices ADM100 and ADM-100FP have insufficient authentication. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication to read system information and operate user's data, but can’t control system or disrupt