CVE Catalog

CVE-2023-51141

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.71%

49th percentile - higher than 49% of all known CVEs

Summary

A vulnerability in ZKTeko BioTime version 8.5.4 and earlier allows a remote attacker to obtain sensitive information through the Authentication & Authorization component.

Risk Assessment

An attacker could capture authentication data or other confidential information, potentially leading to unauthorized system access and data breach.

Recommendation

Immediately update ZKTeko BioTime to the latest available version that fixes this vulnerability.

Original NVD description (English source)

An issue in ZKTeko BioTime v.8.5.4 and before allows a remote attacker to obtain sensitive information via the Authentication & Authorization component

Vulnerability data from NVD (NIST) · CISA KEV · EPSS