CVE-2024-35428: Path Traversal
Published May 30, 2024
·Updated
ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via BaseMediaFile. An authenticated user can delete local files from the server which can lead to DoS.
Affected Software
1 affected component
Zkteco ZKBio CVSecurity=6.1.1
Event History
May 30, 2024
CVE Published
via MITRE·05:02 PM
Data Sourced
via MITRE·05:02 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2024-35428?
CVE-2024-35428 has a high severity rating due to its potential to allow local file deletion and denial of service.
2
How do I fix CVE-2024-35428?
To fix CVE-2024-35428, update ZKTeco ZKBio CVSecurity to a version that addresses the directory traversal vulnerability.
3
Who is affected by CVE-2024-35428?
Users of ZKTeco ZKBio CVSecurity version 6.1.1 are the ones affected by CVE-2024-35428.
4
What can an attacker do with CVE-2024-35428?
An attacker with authenticated access can exploit CVE-2024-35428 to delete files on the server, potentially causing a denial of service.
5
Is CVE-2024-35428 a remote or local vulnerability?
CVE-2024-35428 is a local vulnerability as it requires authenticated user access to exploit.