What is CVE-2025-45746?

CVE-2025-45746 is a medium-severity vulnerability in Zkteco Zkbio Cvsecurity, classified under Use of Hard-coded Cryptographic Key. CVSS score: 6.5/10. Published 2025-05-13.

How severe is CVE-2025-45746?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Zkteco Zkbio Cvsecurity

CVE-2025-45746

In ZKT ZKBio CVSecurity 6.4.1_R an unauthenticated attacker can craft JWT token using the hardcoded secret to authenticate to the service console. NOTE: the Supplier disputes the significance of this report because the service console is t…

EPSS: 0.003 (21.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N.

Affected products

Zkteco Zkbio Cvsecurity — versions 6.4.1_R
Zkteco Zkbio_cvsecurity — versions 6.4.1_r

Weakness classification (CWE)

CWE-321 — Use of Hard-coded Cryptographic Key
CWE-798 — Use of Hard-coded Credentials

References

cve@mitre.org (Exploit)

Frequently asked questions

What is CVE-2025-45746?: CVE-2025-45746 is a medium-severity vulnerability in Zkteco Zkbio Cvsecurity, classified under Use of Hard-coded Cryptographic Key. CVSS score: 6.5/10. Published 2025-05-13.
How severe is CVE-2025-45746?: Medium severity. CVSS v3 base score is 6.5 out of 10.