Description
ZKTeco ZKAccess Professional 3.5.3 contains an insecure file permissions vulnerability that allows authenticated users to escalate privileges by modifying executable files. Attackers can leverage the Modify permission granted to the Authenticated Users group to replace executable binaries with malicious code for privilege escalation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ZKTeco | ZKTeco ZKAccess Professional | 3.5.3 (Build 0005) | — |
References
- Zero Science Lab Disclosure third-party-advisory
- CXSecurity third-party-advisory
- IBM X-Force Exchange vdb-entry
- Packet Storm Security exploit
- Reference exploit
- VulnCheck Advisory: ZKTeco ZKAccess Professional 3.5.3 Privilege Escalation via Insecure Permissions third-party-advisory