Lucene search
HistorySep 04, 2023 - 12:15 p.m.
CVE-2023-4587
idor
zkteco zem800
version 6.60
local attacker
user backup files
device configuration files
local network
vpn server
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
8
Confidence
High
EPSS
0
Percentile
5.1%
An IDOR vulnerability has been found in ZKTeco ZEM800 product affecting version 6.60. This vulnerability allows a local attacker to obtain registered user backup files or device configuration files over a local network or through a VPN server.
Affected configurations
Node
zktecozem800_firmwareMatch6.60
zktecozem800Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| zkteco | zem800_firmware | 6.60 | cpe:2.3:o:zkteco:zem800_firmware:6.60:*:*:*:*:*:*:* |
| zkteco | zem800 | - | cpe:2.3:h:zkteco:zem800:-:*:*:*:*:*:*:* |
Related
vulnrichment
vulnrichment
CVE-2023-4587 Insecure direct object reference in ZKTeco ZEM800
2023-09-04 11:23:06
cve
cve
CVE-2023-4587
2023-09-04 12:15:10
cvelist
cvelist
CVE-2023-4587 Insecure direct object reference in ZKTeco ZEM800
2023-09-04 11:23:06
prion
prion
Information disclosure
2023-09-04 12:15:00
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
8
Confidence
High
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2023-4587