CVE-2022-40472

Summary

ZKTeco Xiamen Information Technology ZKBio Time 8.0.7 Build: 20220721.14829 was discovered to contain a CSV injection vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload injected into the Content text field of the Add New Message module.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://the-it-wonders.blogspot.com/2022/09/zkbio-time-csv-injection.html

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: total

References

• https://the-it-wonders.blogspot.com/2022/09/zkbio-time-csv-injection.html

• ←Previous
• Next→