Vulnerability Details CVE-2014-2938
Hanvon FaceID before 1.007.110 does not require authentication, which allows remote attackers to modify access-control and attendance-tracking data via API commands.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 71.6%
CVSS Severity
CVSS v2 Score 8.3
Products affected by CVE-2014-2938
-
cpe:2.3:h:hanon:faceid:f710
-
cpe:2.3:h:hanon:faceid:f810
-
cpe:2.3:h:hanon:faceid:fa007
-
cpe:2.3:h:hanon:faceid:fk800
-
cpe:2.3:o:hanon:faceid_f710_firmware:1.007.109
-
cpe:2.3:o:hanon:faceid_f810_firmware:*
-
cpe:2.3:o:hanon:faceid_fa007_firmware:*
-
cpe:2.3:o:hanon:faceid_fk800_firmware:*