CVE-2021-39434: ZKTeco Zktime

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A default username and password for an administrator account was discovered in ZKTeco ZKTime 10.0 through 11.1.0, builds 20180901, 20190510.1, 20200309.3, 20200930, 20201231, and 20210220.

Affected products

• ZKTeco Zktime: from 10.0, up to and including 11.1.0; version 11.1.0 only

Published 2022-12-06. Last modified 2026-06-17.