CVE-2023-38951

概要

参考情報

• claroty.com/team82/disclosure-dashboard/cve-2023-38951 · Third Party Advisory
• omair2084/biotime-rce-8.5.5
• krashconsulting.com/fury-of-fingers-biotime-rce
• zkteco.com/en/ZKBio_Time/ZKBioTime
• zkteco.com/en/announcement
• sploitus.com/exploit

biotime のその他の脆弱性

• CVE-2024-13966高 7.3ZKTeco BioTime allows unauthenticated attackers to enumerate usernames and log in as any user with a password unchanged from the default val…
• CVE-2024-6523中 5.4A vulnerability was found in ZKTeco BioTime up to 9.5.2. It has been classified as problematic. Affected is an unknown function of the compo…
• CVE-2023-51142高 7.5An issue in ZKTeco BioTime v.8.5.4 and before allows a remote attacker to obtain sensitive information.
• CVE-2023-51141中 6.5An issue in ZKTeko BioTime v.8.5.4 and before allows a remote attacker to obtain sensitive information via the Authentication & Authorizatio…
• CVE-2023-38952高 7.5Insecure access control in ZKTeco BioTime through 9.0.1 allows authenticated attackers to escalate their privileges due to the fact that ses…