Zkteco Zkbiosecurity V5000 — known CVE vulnerabilities

Every CVE whose affected-product data names Zkteco Zkbiosecurity V5000, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2022-36634 — CVSS 8.8 (high): An access control issue in ZKTeco ZKBioSecurity V5000 3.0.5_r allows attackers to arbitrarily create admin users via a crafted HTTP request.
• CVE-2022-36635 — CVSS 8.8 (high): ZKteco ZKBioSecurity V5000 4.1.3 was discovered to contain a SQL injection vulnerability via the component /baseOpLog.do.
• CVE-2024-6005 — CVSS 3.5 (low): A vulnerability was found in ZKTeco ZKBio CVSecurity V5000 4.1.0. It has been declared as problematic. Affected by this vulnerability is an…
• CVE-2024-6006 — CVSS 3.5 (low): A vulnerability was found in ZKTeco ZKBio CVSecurity V5000 4.1.0. It has been rated as problematic. Affected by this issue is some unknown…
• CVE-2024-6344 — CVSS 2.4 (low): A vulnerability, which was classified as problematic, was found in ZKTeco ZKBio CVSecurity V5000 4.1.0. This affects an unknown part of the…