CVE-2020-17473

Lack of mutual authentication in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0.020190723 allows an attacker to obtain a long-lasting token by impersonating the server...

CVE-2020-17473

Lack of mutual authentication in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0.020190723 allows an attacker to obtain a long-lasting token by impersonating the server...

CVE-2020-17473: Insufficient Session Expiration

Lack of mutual authentication in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0.020190723 allows an attacker to obtain a long-lasting token by impersonating the server...

PT-2020-15014

Name of the Vulnerable Software and Affected Versions ZKTeco FaceDepot 7B version 1.0.213 ZKBiosecurity Server version 1.0.0 20190723 Description A token-reuse issue allows an attacker to create new users, elevate existing users to administrators, delete users, and download user faces from the...

CVE-2020-17474: Insufficient Session Expiration

A token-reuse vulnerability in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0.020190723 allows an attacker to create arbitrary new users, elevate users to administrators, delete users, and download user faces from the database...

PT-2020-15013

Name of the Vulnerable Software and Affected Versions ZKTeco FaceDepot 7B version 1.0.213 ZKBiosecurity Server version 1.0.0 20190723 Description The issue is related to a lack of mutual authentication, which allows an attacker to impersonate the server and obtain a long-lasting token...