Lucene search

KasperskyVULNRICHMENT:CVE-2023-3941

HistoryMay 21, 2024 - 10:20 a.m.

CVE-2023-3941 Multiple arbitrary file writes in ZkTeco-based OEM devices

2024-05-2110:20:39

CWE-23

Kaspersky

github.com

zkteco

oem devices

file writes

vulnerability

root privileges

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

7.2

Confidence

High

EPSS

Percentile

9.0%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

JSON

Relative Path Traversal vulnerability in ZkTeco-based OEM devices allows an attacker

to write any file on the system with root privileges.

This issue affects
ZkTeco-based OEM devices (ZkTeco ProFace X, Smartec ST-FR043, Smartec
ST-FR041ME and possibly others) with the ZAM170-NF-1.8.25-7354-Ver1.0.0
and possibly others.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:h:zkteco:smartec_st_fr041me:*:*:*:*:*:*:*:*"
    ],
    "vendor": "zkteco",
    "product": "smartec_st_fr041me",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "ZAM170-NF-1.8.25-7354-Ver1.0.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:zkteco:facedepot_7b:-:*:*:*:*:*:*:*"
    ],
    "vendor": "zkteco",
    "product": "facedepot_7b",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "ZAM170-NF-1.8.25-7354-Ver1.0.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:zkteco:smartec_st_fr043:*:*:*:*:*:*:*:*"
    ],
    "vendor": "zkteco",
    "product": "smartec_st_fr043",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "ZAM170-NF-1.8.25-7354-Ver1.0.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

github.com/klsecservices/Advisories/blob/master/K-ZkTeco-2023-003.md

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

7.2

Confidence

High

EPSS

Percentile

9.0%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

JSON

Related for VULNRICHMENT:CVE-2023-3941