An issue in zkteco zkbio WDMS v.8.0.5 allows an attacker to execute arbitrary code via the /files/backup/ component.
[
{
"cpes": [
"cpe:2.3:a:zkteco:zkbio_wdms:*:*:*:*:*:*:*:*"
],
"vendor": "zkteco",
"product": "zkbio_wdms",
"versions": [
{
"status": "affected",
"version": "v8.0.5"
}
],
"defaultStatus": "unknown"
}
]