ZKTeco

Records71All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical13CVSS 9.0–10.0

CVSS high22CVSS 7.0–8.9

Exploited now

ZKTeco records in CISA KEV

TI-2023-20210 ZKTeco BioTime Path Traversal Vulnerability CRITICAL 90KEV 2025-05-19

Components

Products in the NVD configurations · select one to filter the records

Biotime 12 records CRITICAL Zkbio Cvsecurity 8 records HIGH Zkbiosecurity V5000 5 records MEDIUM Bioaccess Ivs 4 records MEDIUM Zktime Web 4 records MEDIUM Facedepot 7b Firmware 2 records MEDIUM Zem800 Firmware 2 records HIGH Zkbiosecurity Server 2 records MEDIUM

Records

2 records in Facedepot 7b Firmware · all components

TI-2020-13232 CVE-2020-17474 · GHSA-566m-cw2f-427v

A token-reuse vulnerability in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server…

MEDIUM 44

A token-reuse vulnerability in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0.0_20190723 allows an attacker to create arbitrary new users, elevate users to administrators, delete users, and download user faces…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01184 Published 2020-08-14 No fix listed CWE-613

TI-2020-13231 CVE-2020-17473 · GHSA-w4x5-8r89-cc76

Lack of mutual authentication in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server…

LOW 28

Lack of mutual authentication in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0.0_20190723 allows an attacker to obtain a long-lasting token by impersonating the server.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00745 Published 2020-08-14 No fix listed CWE-613

Open these records in search →

Critical	13
High	22
Medium	36
Low	0
No CVSS	0