CVE-2014-2938 — HIGH (8.3) — White Hats Nepal

Q: What is CVE-2014-2938?

CVE-2014-2938 is a vulnerability with a CVSS score of 8.3 (HIGH). Hanvon FaceID before 1.007.110 does not require authentication, which allows remote attackers to modify access-control and attendance-tracking data via API commands.

Q: How severe is CVE-2014-2938?

CVE-2014-2938 has been rated HIGH with a CVSS base score of 8.3/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2014-2938?

Check the references section above for vendor advisories and patch information. Affected products include: Hanon Faceid F810 Firmware, Hanon Faceid, Hanon Faceid F710 Firmware, Hanon Faceid Fk800 Firmware, Hanon Faceid Fa007 Firmware.

Vulnerability Description

Hanvon FaceID before 1.007.110 does not require authentication, which allows remote attackers to modify access-control and attendance-tracking data via API commands.

CVSS Score

8.3

HIGH

AV:N/AC:M/Au:N/C:P/I:C/A:P

Confidentiality

PARTIAL

Integrity

COMPLETE

Availability

PARTIAL

Affected Products

Vendor	Product	Versions
Hanon	Faceid F810 Firmware	<= 1.007.109
Hanon	Faceid	f810
Hanon	Faceid F710 Firmware	1.007.109
Hanon	Faceid Fk800 Firmware	<= 1.007.109
Hanon	Faceid Fa007 Firmware	<= 1.007.109

Related Weaknesses (CWE)

CWE-287

References

http://www.kb.cert.org/vuls/id/767044Third Party AdvisoryUS Government Resource
http://www.kb.cert.org/vuls/id/767044Third Party AdvisoryUS Government Resource

FAQ

What is CVE-2014-2938?

CVE-2014-2938 is a vulnerability with a CVSS score of 8.3 (HIGH). Hanvon FaceID before 1.007.110 does not require authentication, which allows remote attackers to modify access-control and attendance-tracking data via API commands.

How severe is CVE-2014-2938?

CVE-2014-2938 has been rated HIGH with a CVSS base score of 8.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-2938?

Check the references section above for vendor advisories and patch information. Affected products include: Hanon Faceid F810 Firmware, Hanon Faceid, Hanon Faceid F710 Firmware, Hanon Faceid Fk800 Firmware, Hanon Faceid Fa007 Firmware.