CVE-2024-35430

概要

参考情報

• mrojz/ZKT-Bio-CVSecurity · Exploit
• zkteco.com/en/Security_Bulletinsibs/16

zkbio cvsecurity のその他の脆弱性

• CVE-2025-45746緊急 9.8In ZKT ZKBio CVSecurity 6.4.1_R an unauthenticated attacker can craft JWT token using the hardcoded secret to authenticate to the service co…
• CVE-2024-36526緊急 9.8ZKTeco ZKBio CVSecurity v6.1.1 was discovered to contain a hardcoded cryptographic key.
• CVE-2024-35433高 8.1ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Incorrect Access Control. An authenticated user, without the permissions of managing users, c…
• CVE-2024-35431高 7.5ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via photoBase64. An unauthenticated user can download local files from th…
• CVE-2024-35429中 6.5ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via eventRecord.