Security Advisory

CVE-2024-13966

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-05-27 18:35:31

Last updated 2025-07-14 14:58:38

Assigner cisa-cg

CVSS score 7.3

State PUBLISHED

Description

ZKTeco BioTime allows unauthenticated attackers to enumerate usernames and log in as any user with a password unchanged from the default value '123456'. Users should change their passwords (located under the Attendance Settings tab as "Self-Password").

← Browse all CVEs View on cve.org ↗