What’s Vulnerable › Vulnerabilities

CVE-2019-12183

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-03-02 · updated 2026-06-17
• Weakness: CWE-269

Description

Incorrect Access Control in Safescan Timemoto TM-616 and TA-8000 series allows remote attackers to read any file via the administrative API.

Affected products

• Safescan Ta-8010 Firmware: all versions
• Safescan Ta-8015 Firmware: all versions
• Safescan Ta-8020 Firmware: all versions
• Safescan Ta-8025 Firmware: all versions
• Safescan Ta-8030 Firmware: all versions
• Safescan Ta-8035 Firmware: all versions
• Safescan Timemoto Tm-616 Firmware: all versions

References

• https://github.com/ProCheckUp/SafeScan
• https://procheckup.com/blogs/posts/2020/february/remote-code-execution-on-biometric-iot-devices/
• https://support.timemoto.com/en/s/safescan-time-clock-systems/a/firmware-update-7-dot-03-dot-100-ta8000-14
• https://github.com/ProCheckUp/SafeScan
• https://procheckup.com/blogs/posts/2020/february/remote-code-execution-on-biometric-iot-devices/
• https://support.timemoto.com/en/s/safescan-time-clock-systems/a/firmware-update-7-dot-03-dot-100-ta8000-14

Get alerted when CVE-2019-12183 or the next vulnerability affects your stack