CVE-2022-36634: High severity ZKTeco ZKBioSecurity V5000 vulnerability
An access control issue in ZKTeco ZKBioSecurity V5000 3.0.5r allows attackers to arbitrarily create admin users via a crafted HTTP request.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-36634?
CVE-2022-36634 is an access control issue in ZKTeco ZKBioSecurity V5000 3.0.5_r that allows attackers to arbitrarily create admin users via a crafted HTTP request.
What is the severity of CVE-2022-36634?
CVE-2022-36634 has a severity rating of 8.8 (high).
How does CVE-2022-36634 affect ZKTeco ZKBioSecurity V5000?
CVE-2022-36634 allows attackers to exploit an access control issue in ZKTeco ZKBioSecurity V5000 3.0.5_r.
How can an attacker create admin users in ZKTeco ZKBioSecurity V5000?
An attacker can create admin users in ZKTeco ZKBioSecurity V5000 by sending a crafted HTTP request.
Are there any references for CVE-2022-36634?
References for CVE-2022-36634 can be found at the following URLs: [http://zkbiosecurity.com](http://zkbiosecurity.com), [http://zkteco.com](http://zkteco.com), [https://seclists.org/fulldisclosure/2022/Sep/29](https://seclists.org/fulldisclosure/2022/Sep/29).