CVE-2020-17473

Lack of mutual authentication in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0.020190723 allows an attacker to obtain a long-lasting token by impersonating the server...

CVE-2020-17473

CVE-2020-17473 affects ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0.0_20190723. The root cause is lack of mutual (two-way) authentication, allowing an attacker to impersonate the server and obtain a long‑lived token. Public details from NVD indicate CVSS v3.1/base score 5.9 (Network, ...