Vulnerabilities

TI-2023-20216 CVE-2023-38958 · GHSA-42rx-hfpw-m45p

An access control issue in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers…

LOW 30

An access control issue in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to arbitrarily close and open the doors managed by the platform remotely via sending a crafted web request.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00371 Published 2023-08-03 No fix listed CWE-863

TI-2023-20215 CVE-2023-38956 · GHSA-24cq-5jcg-gqj5

A path traversal vulnerability in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated…

MEDIUM 40

A path traversal vulnerability in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to read arbitrary files via supplying a crafted payload.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00727 Published 2023-08-03 No fix listed CWE-22

TI-2023-20214 CVE-2023-38955 · GHSA-4c47-49qq-pq45

ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to obtain sensitive…

MEDIUM 40

ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to obtain sensitive information about all managed devices, including their IP addresses and device names.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.006 Published 2023-08-03 No fix listed CWE-668

TI-2023-20213 CVE-2023-38954 · GHSA-5g4v-mh29-wpfj

ZKTeco BioAccess IVS v3.3.1 was discovered to contain a SQL injection vulnerability.

MEDIUM 50

ZKTeco BioAccess IVS v3.3.1 was discovered to contain a SQL injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00607 Published 2023-08-03 No fix listed CWE-89

Vulnerabilities

Filters

An access control issue in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers…

A path traversal vulnerability in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated…

ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to obtain sensitive…

ZKTeco BioAccess IVS v3.3.1 was discovered to contain a SQL injection vulnerability.