Lucene search

CVE-2023-3938 Bypassing ZkTeco-based OEM devices/ZKTeco biometric authentication system via SQLi in QR code

🗓️ 21 May 2024 09:15:32Reported by KasperskyType

SQL injection vulnerability ZkTeco OEM devices. Allows unauthorized authentication

Reporter	Title	Published	Views	Family All 5
Vulnrichment	CVE-2023-3938 Bypassing ZkTeco-based OEM devices/ZKTeco biometric authentication system via SQLi in QR code	21 May 202409:32	–	vulnrichment
NVD	CVE-2023-3938	21 May 202410:15	–	nvd
CVE	CVE-2023-3938	21 May 202410:15	–	cve
Securelist	QR code SQL injection and other vulnerabilities in a popular biometric terminal	11 Jun 202408:00	–	securelist
The Hacker News	ZKTeco Biometric System Found Vulnerable to 24 Critical Security Flaws	14 Jun 202408:09	–	thn

[
  {
    "defaultStatus": "unknown",
    "product": "ZkTeco-based OEM devices with firmware ZAM170-NF-1.8.25-7354-Ver1.0.0",
    "vendor": "ZkTeco",
    "versions": [
      {
        "status": "affected",
        "version": "ZAM170-NF-1.8.25-7354-Ver1.0.0"
      }
    ]
  }
]

Source	Link
github	www.github.com/klsecservices/Advisories/blob/master/K-ZkTeco-2023-001.md

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 May 2024 09:32Current

5.3Medium risk

Vulners AI Score5.3

CVSS34.6

EPSS0.00043

CWE-89