CVE-2023-3943: ZKTeco Facedepot 7b

Critical severity, CVSS 10.0. EPSS: 0.9% chance of exploitation in the next 30 days.

Stack-based Buffer Overflow vulnerability in ZkTeco-based OEM devices allows, in some cases, the execution of arbitrary code. Due to the lack of protection mechanisms such as stack canaries and PIE, it is possible to successfully execute code even under restrictive conditions. This issue affects ZkTeco-based OEM devices (ZkTeco ProFace X, Smartec ST-FR043, Smartec ST-FR041ME and possibly others) with firmware ZAM170-NF-1.8.25-7354-Ver1.0.0 and possibly others.

Affected products

• ZKTeco Facedepot 7b
• ZKTeco Smartec St FR041ME
• ZKTeco Smartec St FR043
• ZKTeco ZKTeco-Based Oem Devices With Firmware ZAM170-Nf-1.8.25-7354-VER1.0.0

Published 2024-05-21. Last modified 2026-06-17.