Saho's vulnerability profile centers on the ADM-100 line of network appliances and their firmware, with durable exposure centered on critical authentication gaps and insecure file-upload handling. Treat this as a compact vendor profile; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Saho over time
Signals from CVEs in this vendor scope (3 CVEs).
3 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-38029CRITICAL
Saho’s attendance devices ADM100 and ADM-100FP has insufficient filtering for special characters and file type within their file uploading function. A unauthenticate remote attack | Aug 28, 2023 | 9.8 | 30 | NO | NO |
CVE-2023-38028CRITICAL
Saho’s attendance devices ADM100 and ADM-100FP have insufficient authentication. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication to read | Aug 28, 2023 | 9.1 | 29 | NO | NO |
CVE-2023-38030HIGH
Saho’s attendance devices ADM100 and ADM-100FP have a vulnerability of missing authentication for critical functions. An unauthenticated remote attacker can execute system command | Aug 28, 2023 | 7.5 | 22 | NO | NO |
Signals from CVEs in this vendor scope (3 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Saho.
Media articles that mention a CVE ID that affects a product developed by Saho — matched by CVE ID, not by vendor name.