CVE-2024-13966ZKTeco BioTime default password

Descripción

ZKTeco BioTime allows unauthenticated attackers to enumerate usernames and log in as any user with a password unchanged from the default value '123456'. Users should change their passwords (located under the Attendance Settings tab as "Self-Password").

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• url Third Party Advisory
• url Product
• url Third Party Advisory
• url Third Party Advisory
• https://www.zkteco.com/en/Security_Bulletinsibs/18 Vendor Advisory