CVE-2014-2938

Sažetak

Hanvon FaceID before 1.007.110 does not require authentication, which allows remote attackers to modify access-control and attendance-tracking data via API commands.

Reference

CVSS

Base:	8.3
Impact:	8.5
Exploitability:	8.6

Pristup

Vektor	Složenost	Autentikacija
NETWORK	MEDIUM	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
PARTIAL	COMPLETE	PARTIAL

CVSS vektor

AV:N/AC:M/Au:N/C:P/I:C/A:P

Zadnje važnije ažuriranje

16-07-2014 - 18:54

Objavljeno

22-05-2014 - 20:55