High · 8.1 CVE-2024-35433 EUVD-2024-35336

ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Incorrect Access Control. An authenticated user, without the permissions of managing users, …

Published May 30, 2024 · Updated Feb 13, 2025 · Assigned by mitre

Description

ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Incorrect Access Control. An authenticated user, without the permissions of managing users, can create a new admin user.

References

https://github.com/mrojz/ZKT-Bio-CVSecurity/blob/main/CVE-2024-35433.md