Zkteco Vulnerabilidad

Cronología

Escribe

Not Defined	29

Producto

ZKTeco BioTime	7
ZKTeco BioAccess IVS	4
Zkteco BioTime	3
ZKTeco ZKBiosecurity	2
ZKTeco FaceDepot 7B	2

Contramedidas

Official Fix	4
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	25

Explotabilidad

High	0
Functional	0
Proof-of-Concept	7
Unproven	0
Not Defined	22

Vector de acceso

Not Defined	0
Physical	0
Local	1
Adjacent	14
Network	14

Autenticación

Not Defined	0
High	1
Low	16
None	12

La interacción del usuario

Not Defined	0
Required	4
None	25

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	2
≤5	6
≤6	9
≤7	7
≤8	4
≤9	1
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	2
≤5	6
≤6	13
≤7	3
≤8	4
≤9	1
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	6
≤5	10
≤6	6
≤7	6
≤8	1
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	5
≤7	2
≤8	10
≤9	1
≤10	4

CNA

≤1	0
≤2	0
≤3	0
≤4	1
≤5	1
≤6	0
≤7	0
≤8	0
≤9	1
≤10	0

Proveedor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Explotar día 0

<1k	3
<2k	24
<5k	2
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explotar hoy

<1k	26
<2k	3
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Products (18): BioAccess IVS (4), BioTime (10), Cams Biometrics Integration Module with HR Attendance (1), FaceDepot 7B (2), ZEM500-510-560-760 (1), ZEM600-800 (1), ZEM720 (1), ZEM800 (1), ZKBio Access IVS (1), ZKBio ECO ADMS (1), ZKBio Media (1), ZKBio Time (1), ZKBio WDMS (1), ZKBiosecurity (2), ZKBiosecurity Server (2), ZKTime (1), ZKTime Web (2), ZMM (1)

Fecha de publicación	Base	Temp	Vulnerabilidad	Prod	Exp	Con	EPSS	CTI	CVE
2024-03-21	4.3	4.3	ZKTeco BioTime divulgación de información	Desconocido	Not Defined	Not Defined	0.00045	0.04	CVE-2023-51142
2024-03-21	4.3	4.3	ZKTeco BioTime Authorization Component divulgación de información	Desconocido	Not Defined	Not Defined	0.00045	0.00	CVE-2023-51141
2024-03-08	4.3	4.1	ZKTeco ZKBio Media Service Port 9999 download divulgación de información	Desconocido	Proof-of-Concept	Not Defined	0.00045	0.00	CVE-2024-2318
2024-02-24	5.5	5.3	ZKTeco ZKBio WDMS Privilege Escalation	Desconocido	Not Defined	Not Defined	0.00045	0.03	CVE-2024-22988
2024-02-21	3.5	3.3	ZKTeco ZKBio Access IVS Department Name Search Bar cross site scripting	Desconocido	Proof-of-Concept	Not Defined	0.00045	0.00	CVE-2024-1706
2023-12-15	8.0	7.7	ZKTeco Cams Biometrics Integration Module with HR Attendance controllers.py sql injection	Desconocido	Proof-of-Concept	Not Defined	0.00091	0.02	CVE-2023-48050
2023-09-04	5.7	5.7	ZKTeco ZEM800 Backup File escalada de privilegios	Desconocido	Not Defined	Not Defined	0.00042	0.04	CVE-2023-4587
2023-08-04	7.6	7.6	ZKTeco BioTime SFTP Configuration directory traversal	Desconocido	Not Defined	Not Defined	0.00091	0.00	CVE-2023-38951
2023-08-04	6.9	6.9	ZKTeco BioTime iclock API directory traversal	Desconocido	Not Defined	Not Defined	0.00096	0.04	CVE-2023-38950
2023-08-04	5.9	5.9	ZKTeco BioTime API escalada de privilegios	Desconocido	Not Defined	Not Defined	0.00057	0.00	CVE-2023-38949

19 no se muestran más entradas

🔒 Login Required

You need to signup and login to see more of the remaining 19 results.

◂ AnteriorVisión De ConjuntoPróximo ▸

Interested in the pricing of exploits?

See the underground prices here!