high8.1
CVE-2024-35433
ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Incorrect Access Control.
Impact
ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Incorrect Access Control. An authenticated user, without the permissions of managing users, can create a new admin user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zkteco | Zkbio Cvsecurity | Version 6.1.1 |