CVE-2023-4587 | BDVDB-2026-210994 Detail
ZKTecoZEM800
Description#
An IDOR vulnerability has been found in ZKTeco ZEM800 product affecting version 6.60. This vulnerability allows a local attacker to obtain registered user backup files or device configuration files over a local network or through a VPN server.
Impact#
CAPEC-180 Exploiting Incorrectly Configured Access Control Security Levels
Weaknesses#
- CWE-639 Authorization Bypass Through User-Controlled Key
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.