What is the CVSS score of CVE-2014-2938?

CVE-2014-2938 has a CVSS 2.0 base score of 8.3 (High). CVSS vector: AV:N/AC:M/Au:N/C:P/I:C/A:P. EPSS exploitation probability: 0.6%.

Faceid F810 Firmware CVE-2014-2938

HIGH

Improper Authentication (CWE-287)

2014-05-22 cret@cert.org

Authentication Bypass Faceid F810 Firmware Faceid Faceid F710 Firmware Faceid Fk800 Firmware Faceid Fa007 Firmware

8.3

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

8.3 HIGH

AV:N/AC:M/Au:N/C:P/I:C/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:P/I:C/A:P

Attack Vector

Network

Attack Complexity

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

May 22, 2014 - 20:55 cve.org

HIGH 8.3

DescriptionCVE.org

Hanvon FaceID before 1.007.110 does not require authentication, which allows remote attackers to modify access-control and attendance-tracking data via API commands.

AnalysisAI

Hanvon FaceID before 1.007.110 does not require authentication, which allows remote attackers to modify access-control and attendance-tracking data via API commands. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Improper Authentication (CWE-287), which allows attackers to bypass authentication mechanisms to gain unauthorized access. Hanvon FaceID before 1.007.110 does not require authentication, which allows remote attackers to modify access-control and attendance-tracking data via API commands. Affected products include: Hanon Faceid F810 Firmware, Hanon Faceid, Hanon Faceid F710 Firmware, Hanon Faceid Fk800 Firmware, Hanon Faceid Fa007 Firmware. Version information: before 1.007.110.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement multi-factor authentication, enforce strong password policies, use proven authentication frameworks.