CVE-2023-38958

MediumCVSS 5.3

Published: 03/08/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

23th percentile - higher than 23% of all known CVEs

Summary

An access control issue in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to remotely open and close doors managed by the platform by sending a crafted web request.

Risk Assessment

The organization is exposed to unauthorized physical access to secured areas, potentially leading to theft, espionage, or data breaches.

Recommendation

Immediately update ZKTeco BioAccess IVS to the latest version and enforce authentication for all door management requests.

Original NVD description (English source)

An access control issue in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to arbitrarily close and open the doors managed by the platform remotely via sending a crafted web request.