AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2023-38029

CRITICAL · CVSS 9.8 EPSS 0.77%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-08-28 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2023-38029
Severity
CRITICAL
CVSS
9.8
EPSS
0.77%

Original NVD Description

Saho’s attendance devices ADM100 and ADM-100FP has insufficient filtering for special characters and file type within their file uploading function. A unauthenticate remote attacker authenticated can upload and execute arbitrary files to perform arbitrary system commands or disrupt service.