CVE-2024-35428

CVSS 7.1 HIGHEPSS 0.8%CWE-22

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 7.1EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

30 May 2024Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via BaseMediaFile. An authenticated user can delete local files from the server which can lead to DoS.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Affected products

n/a · n/a

References

https://github.com/mrojz/ZKT-Bio-CVSecurity/blob/main/CVE-2024-35428.md