CVE-2024-35430

Summary

In ZKTeco ZKBio CVSecurity v6.1.1_R and earlier (fixed in 6.1.3_R) an authenticated user can bypass password checks while exporting data from the application.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: total

CVE Program Container

Additional References

• https://github.com/mrojz/ZKT-Bio-CVSecurity/blob/main/CVE-2024-35430.md

References

• https://github.com/mrojz/ZKT-Bio-CVSecurity/blob/main/CVE-2024-35430.md
• https://www.zkteco.com/en/Security_Bulletinsibs/16

• ←Previous
• Next→