All packages
ZKTeco BioAccess IVS vulnerabilities
4 known CVE vulnerabilities in ZKTeco BioAccess IVS, translated and rated.
- CVE-2023-38954Critical
A SQL injection vulnerability was discovered in ZKTeco BioAccess IVS version 3.3.1. It allows an attacker to manipulate database queries.
- CVE-2023-38958Medium
An access control issue in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to remotely open and close doors managed by the platform by sending a crafted web request.
- CVE-2023-38956High
A path traversal vulnerability in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to read arbitrary files by supplying a crafted payload.
- CVE-2023-38955High
A vulnerability in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to obtain sensitive information about all managed devices, including their IP addresses and device names.