Known Vulnerabilities for products from Zkteco
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Zkteco".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Additional devices specifications by Zkteco can be found at device.report : Zkteco
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-8598 json | Not Provided | 2026-05-20 | 2026-05-20 | |
| CVE-2025-15128 json | Not Provided | 2025-12-28 | 2026-06-11 | |
| CVE-2024-6344 json | A vulnerability, which was classified as problematic, was found in ZKTeco ZKBio CVSecurity V5000 4.1.0. This affects an unkno... | Not Provided | 2024-06-26 | 2026-04-29 |
| CVE-2024-6006 json | A vulnerability was found in ZKTeco ZKBio CVSecurity V5000 4.1.0. It has been rated as problematic. Affected by this issue is... | Not Provided | 2024-06-15 | 2026-04-29 |
| CVE-2024-6005 json | A vulnerability was found in ZKTeco ZKBio CVSecurity V5000 4.1.0. It has been declared as problematic. Affected by this vulne... | Not Provided | 2024-06-15 | 2026-04-29 |
| CVE-2024-2318 json | A vulnerability was found in ZKTeco ZKBio Media 2.0.0_x64_2024-01-29-1028. It has been classified as problematic. Affected is... | Not Provided | 2024-03-08 | 2026-04-29 |
| CVE-2024-1706 json | A vulnerability was determined in ZKTeco ZKBio Access IVS up to 3.3.2. This impacts an unknown function of the component Depa... | Not Provided | 2024-02-21 | 2026-04-29 |
| CVE-2023-51142 json | Not Provided | 2024-04-11 | 2026-07-09 | |
| CVE-2023-51141 json | An issue in ZKTeko BioTime v.8.5.4 and before allows a remote attacker to obtain sensitive information via the Authentication... | Not Provided | 2024-04-11 | 2026-07-09 |
| CVE-2023-38958 json | An access control issue in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to arbitrarily close and open the doo... | Not Provided | 2023-08-03 | 2026-07-09 |
| CVE-2023-38956 json | A path traversal vulnerability in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to read arbitrary files via su... | Not Provided | 2023-08-03 | 2026-07-09 |
| CVE-2023-38955 json | Not Provided | 2023-08-03 | 2026-07-09 | |
| CVE-2023-38954 json | ZKTeco BioAccess IVS v3.3.1 was discovered to contain a SQL injection vulnerability. | Not Provided | 2023-08-03 | 2026-07-09 |
| CVE-2023-38952 json | Insecure access control in ZKTeco BioTime through 9.0.1 allows authenticated attackers to escalate their privileges due to th... | Not Provided | 2023-08-03 | 2026-07-09 |
| CVE-2023-38951 json | ZKTeco BioTime 8.5.5 through 9.x before 9.0.1 (20240617.19506) allows authenticated attackers to create or overwrite arbitrar... | Not Provided | 2023-08-03 | 2026-07-09 |
| CVE-2023-38950 json | A path traversal vulnerability in the iclock API of ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read arbitrary ... | Not Provided | 2023-08-03 | 2026-07-09 |
| CVE-2023-38949 json | An issue in a hidden API in ZKTeco BioTime v8.5.5 allows unauthenticated attackers to arbitrarily reset the Administrator pas... | Not Provided | 2023-08-03 | 2026-07-09 |
| CVE-2023-4587 json | ** UNSUPPPORTED WHEN ASSIGNED ** An IDOR vulnerability has been found in ZKTeco ZEM800 product affecting version 6.60. This v... | 5.5 - MEDIUM | 2023-09-04 | 2023-11-07 |
| CVE-2022-44213 json | ZKTeco Xiamen Information Technology ZKBio ECO ADMS <=3.1-164 is vulnerable to Cross Site Scripting (XSS). | 4.8 - MEDIUM | 2022-12-09 | 2022-12-12 |
| CVE-2022-42953 json | Certain ZKTeco products (ZEM500-510-560-760, ZEM600-800, ZEM720, ZMM) allow access to sensitive information via direct reques... | 7.5 - HIGH | 2022-12-25 | 2023-08-08 |
Known software with vulnerabilities from Zkteco
| Type | Vendor | Product | Version |
|---|---|---|---|
| Hardware | Zkteco | Facedepot 7b | - |
| Operating System | Zkteco | Facedepot 7b Firmware | 1.0.213 |
| Application | Zkteco | Zkbiosecurity Server | 1.0.0_20190723 |
| Application | Zkteco | Zktime Web | 2.0.1.12280 |