What’s Vulnerable › Vulnerabilities

CVE-2014-2938

• Severity: high (CVSS 8.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-05-22 · updated 2026-06-17
• Weakness: CWE-287

Description

Hanvon FaceID before 1.007.110 does not require authentication, which allows remote attackers to modify access-control and attendance-tracking data via API commands.

Affected products

• Hanon Faceid: f810, f710, fk800, fa007
• Hanon Faceid F710 Firmware: 1.007.109
• Hanon Faceid F810 Firmware: through 1.007.109
• Hanon Faceid Fa007 Firmware: through 1.007.109
• Hanon Faceid Fk800 Firmware: through 1.007.109

References

• http://www.kb.cert.org/vuls/id/767044
• http://www.kb.cert.org/vuls/id/767044

Get alerted when CVE-2014-2938 or the next vulnerability affects your stack