Zkteco Bioaccess Ivs
4 CVEs affecting Zkteco Bioaccess Ivs. Latest disclosed: 2023-08-03. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-38954 | Critical | 9.8 | 2023-08-03 | ZKTeco BioAccess IVS v3.3.1 was discovered to contain a SQL injection vulnerability. |
CVE-2023-38956 | High | 7.5 | 2023-08-03 | A path traversal vulnerability in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to read arbitrary files via supplying a crafted payload. |
CVE-2023-38955 | High | 7.5 | 2023-08-03 | ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to obtain sensitive information about all managed devices, including their IP addresses and device… |
CVE-2023-38958 | Medium | 5.3 | 2023-08-03 | An access control issue in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to arbitrarily close and open the doors managed by the platform remotel… |