CVE-2024-13966

ZKTeco BioTime allows unauthenticated attackers to enumerate usernames and log in as any user with a password unchanged from the default value '123456'. Users should change their passwords located under the Attendance Settings tab as "Self-Password"...

CVE-2024-13966

creationtimestamp| type| source ---|---|--- 2025-05-27 18:48:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17699...

CVE-2024-13966 ZKTeco BioTime default password

ZKTeco BioTime allows unauthenticated attackers to enumerate usernames and log in as any user with a password unchanged from the default value '123456'. Users should change their passwords located under the Attendance Settings tab as "Self-Password"...

CVE-2024-13966 ZKTeco BioTime default password

ZKTeco BioTime allows unauthenticated attackers to enumerate usernames and log in as any user with a password unchanged from the default value '123456'. Users should change their passwords located under the Attendance Settings tab as "Self-Password"...

CVE-2024-13966

CVE-2024-13966 affects ZKTeco BioTime, a web-based time and attendance system. The vulnerability allows unauthenticated attackers to enumerate usernames and log in as any user using the default password 123456, enabling potential administrative access if a user account remains with the default pa...