Lucene search
HistoryDec 06, 2022 - 12:15 a.m.
CVE-2021-39434
vulnerability
zkteco zktime
admin credentials
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.002 Low
EPSS
Percentile
51.5%
A default username and password for an administrator account was discovered in ZKTeco ZKTime 10.0 through 11.1.0, builds 20180901, 20190510.1, 20200309.3, 20200930, 20201231, and 20210220.
Affected configurations
Node
zktecozktimeRange10.0–11.1.0
ORzktecozktimeMatch11.1.0-
ORzktecozktimeMatch11.1.020180901
ORzktecozktimeMatch11.1.020190510.1
ORzktecozktimeMatch11.1.020200309.3
ORzktecozktimeMatch11.1.020200930
ORzktecozktimeMatch11.1.020201231
ORzktecozktimeMatch11.1.020210220
Related
cve
cve
CVE-2021-39434
2022-12-06 00:15:09
cvelist
cvelist
CVE-2021-39434
2022-12-05 00:00:00
prion
prion
Default credentials
2022-12-06 00:15:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.002 Low
EPSS
Percentile
51.5%
Related for NVD:CVE-2021-39434