What is CVE-2023-3943?

CVE-2023-3943 is a critical-severity vulnerability in Zkteco Zkteco-based Oem Devices With Firmware Zam170-nf-1.8.25-7354-ver1.0.0, classified under Stack-based Buffer Overflow. CVSS score: 10.0/10. Published 2024-05-21.

How severe is CVE-2023-3943?

Critical severity. CVSS v3 base score is 10.0 out of 10.

Buffer overflow in Zkteco Zkteco-based Oem Devices With Firmware Zam170-nf-1.8.25-7354-ver1.0.0

CVE-2023-3943

Stack-based Buffer Overflow vulnerability in ZkTeco-based OEM devices allows, in some cases, the execution of arbitrary code. Due to the lack of protection mechanisms such as stack canaries and PIE, it is possible to successfully execute c…

Vulnerability class: Buffer Overflow

EPSS: 0.009 (56.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.

Affected products

Zkteco Zkteco-based Oem Devices With Firmware Zam170-nf-1.8.25-7354-ver1.0.0 — versions ZAM170-NF-1.8.25-7354-Ver1.0.0

Weakness classification (CWE)

CWE-121 — Stack-based Buffer Overflow

References

vulnerability@kaspersky.com

Frequently asked questions

What is CVE-2023-3943?: CVE-2023-3943 is a critical-severity vulnerability in Zkteco Zkteco-based Oem Devices With Firmware Zam170-nf-1.8.25-7354-ver1.0.0, classified under Stack-based Buffer Overflow. CVSS score: 10.0/10. Published 2024-05-21.
How severe is CVE-2023-3943?: Critical severity. CVSS v3 base score is 10.0 out of 10.