Vendor
ZKTeco
58 known vulnerabilities in products by ZKTeco, 1 of them actively exploited (CISA KEV).
Key figures
58
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
11
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-38950 | ZKTeco BioTime Path Traversal Vulnerability In CISA KEV | 7.5 | |
| High | CVE-2022-36635 | ZKTeco Zkbiosecurity V5000: SQL Injection | 8.8 | |
| Critical | CVE-2023-38951 | ZKTeco BioTime: Path Traversal | 9.8 | |
| High | CVE-2022-42953 | ZKTeco Zem500 Firmware: security vulnerability | 7.5 | |
| High | CVE-2017-14680 | ZKTeco Zktime Web: security vulnerability | 7.5 | |
| High | CVE-2023-38952 | ZKTeco BioTime: security vulnerability | 7.5 | |
| Critical | CVE-2023-3939 | Multiple command injection in ZkTeco-based OEM devices | 10.0 | |
| Critical | CVE-2020-17474 | ZKTeco Zkbiosecurity Server: security vulnerability | 9.8 | |
| Critical | CVE-2023-3943 | Multiple buffer overflow in ZkTeco-based OEM devices | 10.0 | |
| Critical | CVE-2023-3941 | Multiple arbitrary file writes in ZkTeco-based OEM devices | 10.0 | |
| High | CVE-2022-36634 | ZKTeco Zkbiosecurity V5000: security vulnerability | 8.8 | |
| Critical | CVE-2024-36526 | ZKTeco ZKBio CVSecurity: security vulnerability | 9.8 | |
| Critical | CVE-2024-22988 | ZKTeco Zkbio Wdms: security vulnerability | 9.8 | |
| Critical | CVE-2026-8598 | Unauthenticated Export Service in ZKTeco CCTV Cameras | 9.1 | |
| High | CVE-2024-35431 | ZKTeco ZKBio CVSecurity: Path Traversal | 7.5 | |
| High | CVE-2017-13129 | ZKTeco Zktime Web: Cross-Site Request Forgery (CSRF) | 8.0 | |
| Critical | CVE-2023-38954 | ZKTeco Bioaccess Ivs: SQL Injection | 9.8 | |
| High | CVE-2026-108798 | ZKTeco BioTime hard-coded key | 7.3 | |
| Medium | CVE-2017-17057 | ZKTeco Zktime Web: Cross-Site Scripting (XSS) | 6.1 | |
| High | CVE-2017-17056 | ZKTeco Zktime Web: Cross-Site Request Forgery (CSRF) | 8.8 | |
| Medium | CVE-2024-35429 | ZKTeco ZKBio CVSecurity: Path Traversal | 6.5 | |
| High | CVE-2023-3940 | Multiple arbitrary file reads in ZkTeco-based OEM devices | 7.5 | |
| High | CVE-2024-35428 | ZKTeco ZKBio CVSecurity: Path Traversal | 7.1 | |
| High | CVE-2023-51142 | ZKTeco BioTime: Information Disclosure | 7.5 | |
| High | CVE-2024-35430 | ZKTeco ZKBio CVSecurity: security vulnerability | 8.1 |