Description
Hanvon FaceID before 1.007.110 does not require authentication, which allows remote attackers to modify access-control and attendance-tracking data via API commands.
References
- VU#767044 third-party-advisory
Unscored
CVE-2014-2938
EUVD-2014-2960GHSA-2j2h-4h37-3vh9
Hanvon FaceID before 1.007.110 does not require authentication, which allows remote attackers to modify access-control and attendance-track…
Published May 22, 2014 · Updated Aug 6, 2024 · Assigned by certcc