CVE advisoryCRITICAL
CVE-2023-38029
Saho ADM-100 File Upload Vulnerability Allows Command Execution
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
Saho attendance devices have a critical vulnerability allowing unauthenticated remote attackers to upload and execute arbitrary files, potentially leading to system command execution or service disruption. It is important to determine if these devices are present and reachable within your environment.