Vulnerabilities (CVE)

Filtered by vendor Zkteco Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-38951 1 Zkteco 1 Biotime 2023-08-08 N/A 9.8 CRITICAL
A path traversal vulnerability in ZKTeco BioTime v8.5.5 allows attackers to write arbitrary files via using a malicious SFTP configuration.
CVE-2023-38954 1 Zkteco 1 Bioaccess Ivs 2023-08-07 N/A 9.8 CRITICAL
ZKTeco BioAccess IVS v3.3.1 was discovered to contain a SQL injection vulnerability.
CVE-2020-17474 1 Zkteco 3 Facedepot 7b, Facedepot 7b Firmware, Zkbiosecurity Server 2020-08-21 7.5 HIGH 9.8 CRITICAL
A token-reuse vulnerability in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0.0_20190723 allows an attacker to create arbitrary new users, elevate users to administrators, delete users, and download user faces from the database.