CVE Tools
Track your stack

Zkteco-co-ltd

7 CVEs tracked since 2023. Since Aug 2023, 1 of them reached CISA KEV.

Zkteco-co-ltd CVEs per month

Aug 2023 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Zkteco-co-ltd CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2023-0871
2023-093 or fewer
2023-104 or fewer
2023-114 or fewer
2023-124 or fewer
2024-014 or fewer
2024-024 or fewer
2024-034 or fewer
2024-044 or fewer
2024-055 or fewer
2024-064 or fewer
2024-074 or fewer
2024-084 or fewer
2024-093 or fewer
2024-104 or fewer
2024-114 or fewer
2024-123 or fewer
2025-014 or fewer
2025-023 or fewer
2025-035 or fewer
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Zkteco-co-ltd's monthly top three, with their CVEs summed over those months.

  1. Biotime41 month
  2. Zkbio Access Lvs31 month

Latest CVEs

The 12 most recently published vulnerabilities affecting Zkteco-co-ltd.

  1. CVE-2023-3943Multiple buffer overflow in ZkTeco-based OEM devices10.0
  2. CVE-2023-3941Multiple arbitrary file writes in ZkTeco-based OEM devices10.0
  3. CVE-2023-3940Multiple arbitrary file reads in ZkTeco-based OEM devices7.5
  4. CVE-2023-3939Multiple command injection in ZkTeco-based OEM devices10.0
  5. CVE-2023-3938Bypassing ZkTeco-based OEM devices/ZKTeco biometric authentication system via SQLi in QR code4.6
  6. CVE-2023-38952Insecure access control in ZKTeco BioTime through 9.0.1 allows authenticated attackers to escalate their privileges due to the fact that session ids are not validated for the type of user accessing...7.5
  7. CVE-2023-38955ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to obtain sensitive information about all managed devices, including their IP addresses and device names.7.5
  8. CVE-2023-38956A path traversal vulnerability in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to read arbitrary files via supplying a crafted payload.7.5
  9. CVE-2023-38951ZKTeco BioTime 8.5.5 through 9.x before 9.0.1 (20240617.19506) allows authenticated attackers to create or overwrite arbitrary files on the server via crafted requests to /base/sftpsetting/ endpoin...9.8
  10. CVE-2023-38950A path traversal vulnerability in the iclock API of ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read arbitrary files via supplying a crafted payload. This vulnerability was fixed in v...7.5
  11. CVE-2023-38949An issue in a hidden API in ZKTeco BioTime v8.5.5 allows unauthenticated attackers to arbitrarily reset the Administrator password via a crafted web request.7.5
  12. CVE-2023-38954ZKTeco BioAccess IVS v3.3.1 was discovered to contain a SQL injection vulnerability.9.8

The record

Peak rank
#123 in Aug 2023
Busiest month shown
Aug 2023, 7 CVEs
Months with a KEV entry
1 since Aug 2023
Monthly snapshots
1 since 2023
Zkteco-co-ltd's full record, month by month