Show filters
41 Total Results
Displaying 21-30 of 41
Sort by:
Attacker Value
Unknown
CVE-2023-38950
Disclosure Date: August 03, 2023 (last updated October 08, 2023)
A path traversal vulnerability in the iclock API of ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read arbitrary files via supplying a crafted payload.
0
Attacker Value
Unknown
CVE-2023-38949
Disclosure Date: August 03, 2023 (last updated October 08, 2023)
An issue in a hidden API in ZKTeco BioTime v8.5.5 allows unauthenticated attackers to arbitrarily reset the Administrator password via a crafted web request.
0
Attacker Value
Unknown
CVE-2023-38958
Disclosure Date: August 03, 2023 (last updated October 08, 2023)
An access control issue in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to arbitrarily close and open the doors managed by the platform remotely via sending a crafted web request.
0
Attacker Value
Unknown
CVE-2023-38956
Disclosure Date: August 03, 2023 (last updated October 08, 2023)
A path traversal vulnerability in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to read arbitrary files via supplying a crafted payload.
0
Attacker Value
Unknown
CVE-2023-38955
Disclosure Date: August 03, 2023 (last updated October 08, 2023)
ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to obtain sensitive information about all managed devices, including their IP addresses and device names.
0
Attacker Value
Unknown
CVE-2023-38954
Disclosure Date: August 03, 2023 (last updated October 08, 2023)
ZKTeco BioAccess IVS v3.3.1 was discovered to contain a SQL injection vulnerability.
0
Attacker Value
Unknown
CVE-2022-42953
Disclosure Date: December 25, 2022 (last updated October 08, 2023)
Certain ZKTeco products (ZEM500-510-560-760, ZEM600-800, ZEM720, ZMM) allow access to sensitive information via direct requests for the form/DataApp?style=1 and form/DataApp?style=0 URLs. The affected versions may be before 8.88 (ZEM500-510-560-760, ZEM600-800, ZEM720) and 15.00 (ZMM200-220-210). The fixed versions are firmware version 8.88 (ZEM500-510-560-760, ZEM600-800, ZEM720) and firmware version 15.00 (ZMM200-220-210).
0
Attacker Value
Unknown
CVE-2022-44213
Disclosure Date: December 09, 2022 (last updated October 08, 2023)
ZKTeco Xiamen Information Technology ZKBio ECO ADMS <=3.1-164 is vulnerable to Cross Site Scripting (XSS).
0
Attacker Value
Unknown
CVE-2021-39434
Disclosure Date: December 06, 2022 (last updated October 08, 2023)
A default username and password for an administrator account was discovered in ZKTeco ZKTime 10.0 through 11.1.0, builds 20180901, 20190510.1, 20200309.3, 20200930, 20201231, and 20210220.
0
Attacker Value
Unknown
CVE-2022-38803
Disclosure Date: November 30, 2022 (last updated October 08, 2023)
Zkteco BioTime < 8.5.3 Build:20200816.447 is vulnerable to Incorrect Access Control via Leave, overtime, Manual log. An authenticated employee can read local files by exploiting XSS into a pdf generator when exporting data as a PDF
0
