CVE-2024-35430: High severity zkteco zkbio cvsecurity vulnerability
Published May 30, 2024
·Updated
In ZKTeco ZKBio CVSecurity v6.1.1R and earlier (fixed in 6.1.3R) an authenticated user can bypass password checks while exporting data from the application.
Affected Software
2 affected components
ZKTeco ZKBio CVSecurity
ZKTeco ZKBio CVSecurity=6.1.1
Event History
May 30, 2024
CVE Published
via MITRE·03:55 PM
Data Sourced
via MITRE·03:55 PM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-35430?
CVE-2024-35430 has a high severity rating due to its potential for unauthorized data export.
2
How can I fix CVE-2024-35430?
To fix CVE-2024-35430, update your ZKTeco ZKBio CVSecurity application to the latest version released by the vendor.
3
Who is affected by CVE-2024-35430?
CVE-2024-35430 affects authenticated users of ZKTeco ZKBio CVSecurity version 6.1.1.
4
What kind of exploit does CVE-2024-35430 enable?
CVE-2024-35430 allows an authenticated user to bypass password checks while exporting data.
5
Is there a workaround for CVE-2024-35430 before a patch is available?
Currently, no specific workarounds are recommended for CVE-2024-35430; users should monitor for vendor announcements.