Unscored CVE-2019-12182 EUVD-2019-3831GHSA-8h96-38gj-g8p6

Directory Traversal in Safescan Timemoto and TA-8000 series version 1.0 allows unauthenticated remote attackers to execute code via the adm…

Published Mar 13, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

Directory Traversal in Safescan Timemoto and TA-8000 series version 1.0 allows unauthenticated remote attackers to execute code via the administrative API.

References

https://safescan.com/
https://github.com/ProCheckUp/SafeScan
https://procheckup.com/blogs/posts/2020/february/remote-code-execution-on-biometric-iot-devices/
https://support.timemoto.com/en/s/safescan-time-clock-systems/a/firmware-update-7-dot-03-dot-100-ta8000-14