Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: ZKTeco WL20 Biometric Attendance System — zkteco.com/en/Security_Bulletinsibs/20 Clear all filters
TI-2025-34262 CVE-2025-54465 · GHSA-29rm-xc84-5q8f

Hard-coded Credentials Vulnerability in ZKTeco WL20

Priority LOW 31

This vulnerability exists in ZKTeco WL20 due to hard-coded MQTT credentials and endpoints stored in plaintext within the device firmware.

CVSS 4.0MEDIUM 6.8 Physical No auth No interaction EPSS 0.002 Published 2025-08-13 No fix listed CWE-798
TI-2025-34261 CVE-2025-54464 · GHSA-3hxw-4626-cm6f

Cleartext Storage Vulnerability in ZKTeco WL20

Priority LOW 31

This vulnerability exists in ZKTeco WL20 due to storage of admin and user credentials without encryption in the device firmware.

CVSS 4.0HIGH 7.0 Physical No auth No interaction EPSS 0.00092 Published 2025-08-13 No fix listed CWE-312