Description
An issue in a hidden API in ZKTeco BioTime v8.5.5 allows unauthenticated attackers to arbitrarily reset the Administrator password via a crafted web request.
Unscored
CVE-2023-38949
EUVD-2023-42709GHSA-4m8x-4g54-h49v
An issue in a hidden API in ZKTeco BioTime v8.5.5 allows unauthenticated attackers to arbitrarily reset the Administrator password via a cr…
Published Aug 3, 2023 · Updated Jul 9, 2026 · Assigned by mitre