high8.3
CVE-2014-2938
Hanvon FaceID before 1.007.110 does not require authentication, which allows remote attackers to modify access-control and attendance-tracking data via API com…
Impact
Hanvon FaceID before 1.007.110 does not require authentication, which allows remote attackers to modify access-control and attendance-tracking data via API commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hanon | Faceid F810 Firmware | through 1.007.109 |
| Hanon | Faceid | Versions f810, f710, fk800, fa007 |
| Hanon | Faceid F710 Firmware | Version 1.007.109 |
| Hanon | Faceid Fk800 Firmware | through 1.007.109 |
| Hanon | Faceid Fa007 Firmware | through 1.007.109 |