Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2023-38958

An access control issue in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to arbitrarily close and open the doors managed by the platform remotely via sending a crafted web request.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Zkteco
Products
Bioaccess Ivs
CVE-2023-38956

A path traversal vulnerability in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to read arbitrary files via supplying a crafted payload.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Zkteco
Products
Bioaccess Ivs
CVE-2023-38955

ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to obtain sensitive information about all managed devices, including their IP addresses and device names.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Zkteco
Products
Bioaccess Ivs
CVE-2023-38954

ZKTeco BioAccess IVS v3.3.1 was discovered to contain a SQL injection vulnerability.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Zkteco
Products
Bioaccess Ivs