adm-100_firmware vulnerabilities
3 known vulnerabilities in adm-100_firmware from Saho. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
ADM100: Missing Authentication for Critical Functionality
Saho’s attendance devices ADM100 and ADM-100FP have a vulnerability of missing authentication for critical functions. An unauthenticated remote attacker can execute system commands in partial website URLs to read sensitive device information without permission
- 9.8 Critical severity
ADM100: Unrestricted Upload of File with Dangerous Type
Saho’s attendance devices ADM100 and ADM-100FP has insufficient filtering for special characters and file type within their file uploading function. A unauthenticate remote attacker authenticated can upload and execute arbitrary files to perform arbitrary syst
- 9.1 Critical severity
ADM100: Missing Authentication for Critical Functionality
Saho’s attendance devices ADM100 and ADM-100FP have insufficient authentication. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication to read system information and operate user's data, but can’t control system or disrupt