Read the docs

ZKTeco

Records71All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical13CVSS 9.0–10.0
CVSS high22CVSS 7.0–8.9

Exploited now

ZKTeco records in CISA KEV
TI-2023-20210 ZKTeco BioTime Path Traversal Vulnerability Priority CRITICAL 90KEV 2025-05-19

Components

Products in the NVD configurations · select one to filter the records
Biotime 12 records CRITICAL Zkbio Cvsecurity 8 records HIGH Zkbiosecurity V5000 5 records MEDIUM Bioaccess Ivs 4 records MEDIUM Zktime Web 4 records MEDIUM Facedepot 7b Firmware 2 records MEDIUM Zem800 Firmware 2 records HIGH Zkbiosecurity Server 2 records MEDIUM

Records

4 records in Zktime Web · all components

TI-2017-12521 CVE-2017-17056 · GHSA-v25g-pr9m-qxq7

The ZKTime Web Software 2.0.1.12280 allows the Administrator to elevate the privileges of…

Priority LOW 39

The ZKTime Web Software 2.0.1.12280 allows the Administrator to elevate the privileges of the application user using a 'password_change()' function of the Modify Password component, reachable via the old_password, new_pa…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00741 Published 2017-12-04 No fix listed CWE-352
TI-2017-09747 CVE-2017-13129 · GHSA-2cwj-97vw-wc3w

Cross-site request forgery (CSRF) vulnerability in ZKTeco ZKTime Web 2.0.1.12280 allows…

Priority LOW 37

Cross-site request forgery (CSRF) vulnerability in ZKTeco ZKTime Web 2.0.1.12280 allows remote authenticated users to hijack the authentication of administrators for requests that add administrators by leveraging lack of…

CVSS 3.0HIGH 8.0 Network Low privileges User interaction EPSS 0.01079 Published 2017-09-26 No fix listed CWE-352
Open these records in search →