high7.5
CVE-2023-38956
A path traversal vulnerability in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to read arbitrary files via supplying a crafted payload.
Impact
A path traversal vulnerability in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to read arbitrary files via supplying a crafted payload.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zkteco | Bioaccess Ivs | Version 3.3.1 |