NetSight
high8.8

CVE-2022-36634

An access control issue in ZKTeco ZKBioSecurity V5000 3.0.5_r allows attackers to arbitrarily create admin users via a crafted HTTP request.

Impact

An access control issue in ZKTeco ZKBioSecurity V5000 3.0.5_r allows attackers to arbitrarily create admin users via a crafted HTTP request.

Affected products

VendorProductAffected versions
ZktecoZkbiosecurity V5000
Version 3.0.5.0_r

Weakness classification

References