References https://cn-sec.com/archives/3360122.html https://blog.csdn.net/2301_77001946/article/details/149902368 https://github.com/eeeeeeeeee-code/POC https://blog.csdn.net/kukudeshuo/article/details/123090070 https://www.cn-zkteco.com/newsinfo/7475079.html https://blog.csdn.net/qq_46620129/article/details/121346183 https://cn-sec.com/archives/3360122.html
Related VulnerabilitiesZKTeco BioTime 平台 /accounts/login 默认口令漏洞PoCCVE-2023-38952: ZKTeco BioTime <= 9.0.1 - Privilege EscalationZKTeco ZKBio CVSecurity /app/v1/photoBase64 目录遍历漏洞(CVE-2024-35431)ZKTeco BioTime v8.5.5存在路径遍历漏洞(CVE-2023-38950)PoCCVE-2023-38950: ZKTeco BioTime v8.5.5 - Path TraversalZKTeco BioTime v8.5.5 /iclock/file 目录遍历漏洞(CVE-2023-38950)Zkteco门禁管理系统-默认口令