Path traversal

2023-08-0323:15:00

PRIOn knowledge base

www.prio-n.com

zkteco biotime v8.5.5

path traversal

vulnerability

arbitrary files

sftp

nvd

9.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.5%

A path traversal vulnerability in ZKTeco BioTime v8.5.5 allows attackers to write arbitrary files via using a malicious SFTP configuration.

CPENameOperatorVersion
biotimeeq8.5.5

CPE	Name	Operator	Version
	biotime	eq	8.5.5

References

zkteco.com

claroty.com/team82/disclosure-dashboard/cve-2023-38951