Login Request a demo
ZK
Vendor
Zkteco
27 products with CVEs on record
65
CVEs
1
On KEV
5
New 30D
Products
BI
BioTime
ZKTeco
9.8
18 CVEs1 on KEV5 new
ZC
ZKBio CVSecurity
ZKTeco
9.8
8 CVEs0 on KEV0 new
ZV
Zkbiosecurity V5000
Zkteco
8.8
5 CVEs0 on KEV0 new
ZW
Zktime Web
Zkteco
8.8
5 CVEs0 on KEV0 new
BI
Bioaccess Ivs
Zkteco
9.8
4 CVEs0 on KEV0 new
F7
Facedepot 7b Firmware
Zkteco
9.8
2 CVEs0 on KEV0 new
ZF
Zem800 Firmware
Zkteco
7.5
2 CVEs0 on KEV0 new
ZS
Zkbiosecurity Server
Zkteco
9.8
2 CVEs0 on KEV0 new
AD
Automatic Data Master Server
Zkteco
4.8
1 CVEs0 on KEV0 new
IV
iClock v3.1-168
ZKteco
4.3
1 CVEs0 on KEV0 new
SS
SSC335-GC2063-Face-0b77 Solution Camera
ZKTeco
9.1
1 CVEs0 on KEV0 new
WD
Wdms
Zkteco
5.4
1 CVEs0 on KEV0 new
WP
Wdms Pro
Zkteco
5.4
1 CVEs0 on KEV0 new
ZF
Zem500 Firmware
Zkteco
7.5
1 CVEs0 on KEV0 new
ZF
Zem510 Firmware
Zkteco
7.5
1 CVEs0 on KEV0 new
ZF
Zem560 Firmware
Zkteco
7.5
1 CVEs0 on KEV0 new
ZF
Zem600 Firmware
Zkteco
7.5
1 CVEs0 on KEV0 new
ZF
Zem720 Firmware
Zkteco
7.5
1 CVEs0 on KEV0 new
ZF
Zem760 Firmware
Zkteco
7.5
1 CVEs0 on KEV0 new
ZA
Zkbio Access Ivs
Zkteco
5.4
1 CVEs0 on KEV0 new
ZM
Zkbio Media
Zkteco
7.5
1 CVEs0 on KEV0 new
ZT
ZKBio Time
ZKTeco
3.7
1 CVEs0 on KEV0 new
ZW
Zkbio Wdms
Zkteco
9.8
1 CVEs0 on KEV0 new
ZK
Zktime
Zkteco
7.5
1 CVEs0 on KEV0 new
ZF
Zmm200 Firmware
Zkteco
7.5
1 CVEs0 on KEV0 new
ZF
Zmm210 Firmware
Zkteco
7.5
1 CVEs0 on KEV0 new
ZF
Zmm220 Firmware
Zkteco
7.5
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-108798
BI
BioTime
ZKTeco
7.3
0%
Oct 12ZKTeco BioTime hard-coded key
CVE-2026-108797
BI
BioTime
ZKTeco
4.3
0%
Oct 12ZKTeco BioTime Employee REST API employees authorization
CVE-2026-108796
BI
BioTime
ZKTeco
4.3
0%
Oct 12ZKTeco BioTime Biometric Data Endpoint finger_data authorization
CVE-2026-108795
BI
BioTime
ZKTeco
4.3
0%
Oct 12ZKTeco BioTime System Settings API systemSettings access control
CVE-2026-108794
BI
BioTime
ZKTeco
6.3
0%
Oct 12ZKTeco BioTime Database Migration Functionality db_migrate_setting sql injection
CVE-2026-8598
SS
SSC335-GC2063-Face-0b77 Solution Camera
ZKTeco
9.1
1%
May 20Unauthenticated Export Service in ZKTeco CCTV Cameras
CVE-2025-15128
BI
BioTime
ZKTeco
5.3
0%
Dec 28ZKTeco BioTime Endpoint safe_setting credentials storage
CVE-2024-13966
BI
BioTime
ZKTeco
7.3
0%
May 27ZKTeco BioTime default password
CVE-2025-45746
ZC
ZKBio CVSecurity
ZKTeco
9.8
0%
May 13In ZKT ZKBio CVSecurity 6.4.1_R an unauthenticated attacker can craft JWT token using the hardcoded secret to authenticate to the service console
CVE-2024-11049
ZT
ZKBio Time
ZKTeco
3.7
0%
Nov 10ZKTeco ZKBio Time Image File photo direct request
CVE-2024-45250
IV
iClock v3.1-168
ZKteco
4.3
0%
Oct 6ZKteco – CWE 200 Exposure of Sensitive Information to an Unauthorized Actor
CVE-2023-51157
WD
Wdms
Zkteco
5.4
0%
Sep 25Cross Site Scripting vulnerability in ZKTeco WDMS v.5.1.3 Pro allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted script to the Emp…
CVE-2024-24257
ZW
Zktime Web
Zkteco
7.5
0%
Jul 26An issue in skteco.com Central Control Attendance Machine web management platform v.3.0 allows an attacker to obtain sensitive information via a crafted script to the csl/user…
CVE-2024-36526
ZC
Zkbio Cvsecurity
Zkteco
9.8
1%
Jul 9ZKTeco ZKBio CVSecurity v6.1.1 was discovered to contain a hardcoded cryptographic key
CVE-2024-6523
BI
Biotime
Zkteco
5.4
0%
Jul 5A vulnerability was found in ZKTeco BioTime up to 9.5.2
CVE-2024-6344
ZV
Zkbiosecurity V5000
Zkteco
2.4
0%
Jun 26A vulnerability, which was classified as problematic, was found in ZKTeco ZKBio CVSecurity V5000 4.1.0
CVE-2024-6006
ZV
Zkbiosecurity V5000
Zkteco
3.5
0%
Jun 15A vulnerability was found in ZKTeco ZKBio CVSecurity V5000 4.1.0
CVE-2024-6005
ZV
Zkbiosecurity V5000
Zkteco
3.5
0%
Jun 15A vulnerability was found in ZKTeco ZKBio CVSecurity V5000 4.1.0
CVE-2024-35433
ZC
Zkbio Cvsecurity
Zkteco
8.1
0%
May 30ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Incorrect Access Control
CVE-2024-35431
ZC
Zkbio Cvsecurity
Zkteco
7.5
1%
May 30ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via photoBase64
CVE-2024-35429
ZC
Zkbio Cvsecurity
Zkteco
6.5
1%
May 30ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via eventRecord
CVE-2024-35428
ZC
Zkbio Cvsecurity
Zkteco
7.1
1%
May 30ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via BaseMediaFile
CVE-2024-35432
ZC
Zkbio Cvsecurity
Zkteco
6.1
0%
May 30ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Cross Site Scripting (XSS) via an Audio File
CVE-2024-35430
ZC
Zkbio Cvsecurity
Zkteco
8.1
1%
May 30In ZKTeco ZKBio CVSecurity v6.1.1_R and earlier (fixed in 6.1.3_R) an authenticated user can bypass password checks while exporting data from the application
CVE-2023-51142
BI
Biotime
Zkteco
7.5
1%
Apr 11An issue in ZKTeco BioTime v.8.5.4 and before allows a remote attacker to obtain sensitive information
CVE-2023-51141
BI
Biotime
Zkteco
6.5
1%
Apr 11An issue in ZKTeko BioTime v.8.5.4 and before allows a remote attacker to obtain sensitive information via the Authentication & Authorization component
CVE-2024-2318
ZM
Zkbio Media
Zkteco
7.5
1%
Mar 8A vulnerability was found in ZKTeco ZKBio Media 2.0.0_x64_2024-01-29-1028
CVE-2024-22988
ZW
Zkbio Wdms
Zkteco
9.8
1%
Feb 23ZKteco ZKBio WDMS before 9.0.2 Build 20250526 allows an attacker to download a database backup via the /files/backup/ component because the filename is based on a predictable…
CVE-2024-1706
ZA
Zkbio Access Ivs
Zkteco
5.4
0%
Feb 21A vulnerability was determined in ZKTeco ZKBio Access IVS up to 3.3.2
CVE-2023-4587
ZF
Zem800 Firmware
Zkteco
5.5
0%
Sep 4An IDOR vulnerability has been found in ZKTeco ZEM800 product affecting version 6.60
CVE-2023-38952
BI
Biotime
Zkteco
7.5
3%
Aug 3Insecure access control in ZKTeco BioTime through 9.0.1 allows authenticated attackers to escalate their privileges due to the fact that session ids are not validated for the type…
CVE-2023-38951
BI
Biotime
Zkteco
9.8
3%
Aug 3ZKTeco BioTime 8.5.5 through 9.x before 9.0.1 (20240617.19506) allows authenticated attackers to create or overwrite arbitrary files on the server via crafted requests to…
CVE-2023-38949
BI
Biotime
Zkteco
7.5
0%
Aug 3An issue in a hidden API in ZKTeco BioTime v8.5.5 allows unauthenticated attackers to arbitrarily reset the Administrator password via a crafted web request
CVE-2023-38958
BI
Bioaccess Ivs
Zkteco
5.3
0%
Aug 3An access control issue in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to arbitrarily close and open the doors managed by the platform remotely via sending a…
CVE-2023-38956
BI
Bioaccess Ivs
Zkteco
7.5
1%
Aug 3A path traversal vulnerability in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to read arbitrary files via supplying a crafted payload
CVE-2023-38955
BI
Bioaccess Ivs
Zkteco
7.5
1%
Aug 3ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to obtain sensitive information about all managed devices, including their IP addresses and device names
CVE-2023-38954
BI
Bioaccess Ivs
Zkteco
9.8
1%
Aug 3ZKTeco BioAccess IVS v3.3.1 was discovered to contain a SQL injection vulnerability
CVE-2023-38950
In wildKEV
BI
Biotime
Zkteco
7.5
92%
Aug 3ZKTeco BioTime Path Traversal Vulnerability
CVE-2022-42953
ZF
Zmm210 Firmware
Zkteco
7.5
5%
Dec 25Certain ZKTeco products (ZEM500-510-560-760, ZEM600-800, ZEM720, ZMM) allow access to sensitive information via direct requests for the form/DataApp?style=1 and…
CVE-2022-44213
AD
Automatic Data Master Server
Zkteco
4.8
0%
Dec 9ZKTeco Xiamen Information Technology ZKBio ECO ADMS <=3.1-164 is vulnerable to Cross Site Scripting (XSS)
CVE-2021-39434
ZK
Zktime
Zkteco
7.5
1%
Dec 6A default username and password for an administrator account was discovered in ZKTeco ZKTime 10.0 through 11.1.0, builds 20180901, 20190510.1, 20200309.3, 20200930, 20201231, and…
CVE-2022-38803
BI
Biotime
Zkteco
6.8
1%
Nov 30Zkteco BioTime < 8.5.3 Build:20200816.447 is vulnerable to Incorrect Access Control via Leave, overtime, Manual log
CVE-2022-38802
BI
Biotime
Zkteco
6.2
1%
Nov 30Zkteco BioTime < 8.5.3 Build:20200816.447 is vulnerable to Incorrect Access Control via resign, private message, manual log, time interval, attshift, and holiday
CVE-2022-38801
BI
Biotime
Zkteco
5.4
0%
Nov 30In Zkteco BioTime < 8.5.3 Build:20200816.447, an employee can hijack an administrator session and cookies using blind cross-site scripting
CVE-2022-30515
BI
Biotime
Zkteco
5.3
1%
Nov 8ZKTeco BioTime 8.5.4 is missing authentication on folders containing employee photos, allowing an attacker to view them through filename enumeration
CVE-2022-36635
ZV
Zkbiosecurity V5000
Zkteco
8.8
17%
Oct 7ZKteco ZKBioSecurity V5000 4.1.3 was discovered to contain a SQL injection vulnerability via the component /baseOpLog.do
CVE-2022-36634
ZV
Zkbiosecurity V5000
Zkteco
8.8
1%
Oct 7An access control issue in ZKTeco ZKBioSecurity V5000 3.0.5_r allows attackers to arbitrarily create admin users via a crafted HTTP request
CVE-2020-17474
F7
Facedepot 7b Firmware
Zkteco
9.8
1%
Aug 14A token-reuse vulnerability in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0.0_20190723 allows an attacker to create arbitrary new users, elevate users to…
CVE-2020-17473
F7
Facedepot 7b Firmware
Zkteco
5.9
1%
Aug 14Lack of mutual authentication in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0.0_20190723 allows an attacker to obtain a long-lasting token by impersonating the server
CVE-2017-17057
ZW
Zktime Web
Zkteco
6.1
1%
Dec 4There is a reflected XSS vulnerability in ZKTime Web 2.0.1.12280
CVE-2017-17056
ZW
Zktime Web
Zkteco
8.8
1%
Dec 4The ZKTime Web Software 2.0.1.12280 allows the Administrator to elevate the privileges of the application user using a 'password_change()' function of the Modify Password…
CVE-2017-13129
ZW
Zktime Web
Zkteco
8.0
1%
Sep 26Cross-site request forgery (CSRF) vulnerability in ZKTeco ZKTime Web 2.0.1.12280 allows remote authenticated users to hijack the authentication of administrators for requests that…
CVE-2017-14680
ZW
Zktime Web
Zkteco
7.5
4%
Sep 21ZKTeco ZKTime Web 2.0.1.12280 allows remote attackers to obtain sensitive employee metadata via a direct request for a PDF document