Zkteco: >> Bioaccess Ivs Security Vulnerabilities
ZKTeco BioAccess IVS v3.3.1 was discovered to contain a SQL injection vulnerability.
CVSS Score
9.8
EPSS Score
0.001
Published
2023-08-03
ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to obtain sensitive information about all managed devices, including their IP addresses and device names.
CVSS Score
7.5
EPSS Score
0.001
Published
2023-08-03
A path traversal vulnerability in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to read arbitrary files via supplying a crafted payload.
CVSS Score
7.5
EPSS Score
0.005
Published
2023-08-03
An access control issue in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to arbitrarily close and open the doors managed by the platform remotely via sending a crafted web request.
CVSS Score
5.3
EPSS Score
0.001
Published
2023-08-03