CVE-2014-2938

Publication date

2014-05-22 20:00:00

Family

certcc

State

PUBLISHED

Description

Hanvon FaceID before 1.007.110 does not require authentication, which allows remote attackers to modify access-control and attendance-tracking data via API commands.