CVE-2024-45250

Summary

ZKteco – CWE 200 Exposure of Sensitive Information to an Unauthorized Actor

Affected Software

VendorProductVersion RangeStatus
ZKtecoiClock v3.1-168v3.1-168 < EOL product. Upgrade to a newer product or limit access to device.affected

Weaknesses

  • CWE-200: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References