← Back to browse · API

CVE-2023-3941

Severity
CRITICAL
CVSS
10.0
EPSS
0.00917
Risk score
40.32
CISA KEV
No
PoC
No
Published
2024-05-21
Modified
2024-08-02
First seen
2026-08-08
Aliases
EUVD-2023-44567, GHSA-HXRC-P4FV-GC5G
Products
ZKTeco:ZkTeco-based OEM devices with firmware ZAM170-NF-1.8.25-7354-Ver1.0.0 ZAM170-NF-1.8.25-7354-Ver1.0.0
Sources
euvd EUVD-2023-44567

Description

Relative Path Traversal vulnerability in ZkTeco-based OEM devices allows an attacker to write any file on the system with root privileges. This issue affects ZkTeco-based OEM devices (ZkTeco ProFace X, Smartec ST-FR043, Smartec ST-FR041ME and possibly others) with the ZAM170-NF-1.8.25-7354-Ver1.0.0 and possibly others.

References