Zkteco

Zkbiosecurity V5000

5 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.8

CVE-2024-6344

  • EPSS 0.1%
  • Published 26.06.2024 11:15:52
  • Last modified 10.07.2025 07:15:24

A vulnerability, which was classified as problematic, was found in ZKTeco ZKBio CVSecurity V5000 4.1.0. This affects an unknown part of the component Push Configuration Section. The manipulation of the argument Configuration Name leads to cross site ...

5.1

CVE-2024-6006

Exploit
  • EPSS 0.13%
  • Published 15.06.2024 12:15:49
  • Last modified 17.07.2025 06:15:24

A vulnerability was found in ZKTeco ZKBio CVSecurity V5000 4.1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Summer Schedule Handler. The manipulation of the argument Schedule Name leads to...

5.1

CVE-2024-6005

Exploit
  • EPSS 0.13%
  • Published 15.06.2024 10:15:11
  • Last modified 17.07.2025 06:15:21

A vulnerability was found in ZKTeco ZKBio CVSecurity V5000 4.1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Department Section. The manipulation of the argument Department Name le...

8.8

CVE-2022-36635

Exploit
  • EPSS 3.18%
  • Published 07.10.2022 23:15:12
  • Last modified 21.11.2024 07:13:26

ZKteco ZKBioSecurity V5000 4.1.3 was discovered to contain a SQL injection vulnerability via the component /baseOpLog.do.

8.8

CVE-2022-36634

Exploit
  • EPSS 0.18%
  • Published 07.10.2022 20:15:14
  • Last modified 21.11.2024 07:13:26

An access control issue in ZKTeco ZKBioSecurity V5000 3.0.5_r allows attackers to arbitrarily create admin users via a crafted HTTP request.