Multiple Hanvon Face ID Products CVE-2014-2938 Authentication Security Bypass Vulnerability
BID:67525
Info
Multiple Hanvon Face ID Products CVE-2014-2938 Authentication Security Bypass Vulnerability
| Bugtraq ID: | 67525 |
| Class: | Design Error |
| CVE: |
CVE-2014-2938 |
| Remote: | Yes |
| Local: | No |
| Published: | May 20 2014 12:00AM |
| Updated: | May 20 2014 12:00AM |
| Credit: | Kelvin Tan Thiam Teck |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Multiple Hanvon Face ID Products CVE-2014-2938 Authentication Security Bypass Vulnerability
Multiple Hanvon Face ID Products are prone to a security-bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions.
Face ID F710, F810, FA007, FK800 running firmware versions prior to 1.007.110 are vulnerable.
Multiple Hanvon Face ID Products are prone to a security-bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions.
Face ID F710, F810, FA007, FK800 running firmware versions prior to 1.007.110 are vulnerable.
Exploit / POC
Multiple Hanvon Face ID Products CVE-2014-2938 Authentication Security Bypass Vulnerability
An attacker can use readily available network utilities to exploit this issue.
An attacker can use readily available network utilities to exploit this issue.
Solution / Fix
Multiple Hanvon Face ID Products CVE-2014-2938 Authentication Security Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.