CVE-2023-38958: Medium severity ZKTeco BioAccess IVS vulnerability
Published Aug 3, 2023
·Updated
An access control issue in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to arbitrarily close and open the doors managed by the platform remotely via sending a crafted web request.
Affected Software
1 affected component
ZKTeco BioAccess IVS=3.3.1
Event History
Aug 3, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
02:15 AM
Description
Data Sourced
via NVD·02:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-38958?
CVE-2023-38958 is an access control issue in ZKTeco BioAccess IVS v3.3.1 that allows unauthenticated attackers to remotely close and open doors managed by the platform.
2
How can an attacker exploit the vulnerability?
By sending a crafted web request, an unauthenticated attacker can exploit CVE-2023-38958 to remotely control the doors managed by ZKTeco BioAccess IVS v3.3.1.
3
What is the severity of CVE-2023-38958?
The severity of CVE-2023-38958 is medium with a CVSS score of 5.3.
4
Which version of ZKTeco BioAccess IVS is affected by CVE-2023-38958?
CVE-2023-38958 affects version 3.3.1 of ZKTeco BioAccess IVS.
5
How can I mitigate CVE-2023-38958?
Apply the latest security patch or update provided by ZKTeco BioAccess IVS to fix CVE-2023-38958.