CVE-2014-2938
Published May 22, 2014
Last updated 10 years ago
Overview
- Description
- Hanvon FaceID before 1.007.110 does not require authentication, which allows remote attackers to modify access-control and attendance-tracking data via API commands.
- Source
- cret@cert.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 8.3
- Impact score
- 8.5
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:P/I:C/A:P
Weaknesses
- nvd@nist.gov
- CWE-287
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hanon:faceid_f810_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "94819D23-559F-4B62-B3A2-31DC65A515A3",
"versionEndIncluding": "1.007.109"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hanon:faceid:f810:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8EC1F2C4-C6C0-4E03-AE24-910DCDD4A837"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hanon:faceid_f710_firmware:1.007.109:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CC89D48D-8D62-49B2-A12D-9A1E966C2906"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hanon:faceid:f710:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "39A156BF-126F-475B-B5CB-7A0E992ECCA4"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hanon:faceid_fk800_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1BC27131-71CF-4DA3-953A-BBC3A15DC560",
"versionEndIncluding": "1.007.109"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hanon:faceid:fk800:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6274AE71-48EE-42EC-AED8-524AE493BE93"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hanon:faceid_fa007_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D6C5C44-CD37-4362-9ABE-DFE2C300AEB4",
"versionEndIncluding": "1.007.109"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hanon:faceid:fa007:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "11BDC982-DB2B-41CB-BE2B-F47832050DAC"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]