ZKTeco

Records71All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical13CVSS 9.0–10.0

CVSS high22CVSS 7.0–8.9

Exploited now

ZKTeco records in CISA KEV

TI-2023-20210 ZKTeco BioTime Path Traversal Vulnerability CRITICAL 90KEV 2025-05-19

Components

Products in the NVD configurations · select one to filter the records

Biotime 12 records CRITICAL Zkbio Cvsecurity 8 records HIGH Zkbiosecurity V5000 5 records MEDIUM Bioaccess Ivs 4 records MEDIUM Zktime Web 4 records MEDIUM Facedepot 7b Firmware 2 records MEDIUM Zem800 Firmware 2 records HIGH Zkbiosecurity Server 2 records MEDIUM

Records

2 records in Zem800 Firmware · all components

TI-2022-20938 CVE-2022-42953 · GHSA-54r9-6x6g-2vfv

Certain ZKTeco products (ZEM500-510-560-760, ZEM600-800, ZEM720, ZMM) allow access to…

HIGH 72

Certain ZKTeco products (ZEM500-510-560-760, ZEM600-800, ZEM720, ZMM) allow access to sensitive information via direct requests for the form/DataApp?style=1 and form/DataApp?style=0 URLs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05156 Published 2022-12-25 No fix listed CWE-425

TI-2023-04231 CVE-2023-4587 · GHSA-wv8q-whpg-vf5v

Insecure direct object reference in ZKTeco ZEM800

LOW 37

An IDOR vulnerability has been found in ZKTeco ZEM800 product affecting version 6.60.

CVSS 3.1HIGH 8.3 Adjacent network No auth No interaction EPSS 0.00222 Published 2023-09-04 No fix listed CWE-639

Open these records in search →

Critical	13
High	22
Medium	36
Low	0
No CVSS	0