ZKTeco ZEM800 Firmware vulnerabilities

2 CVEs affecting ZKTeco ZEM800 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-4587, published 2023-09-04.

More from ZKTeco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-42953, published 2022-12-25. High severity, CVSS 7.5. EPSS: 5% chance of exploitation in the next 30 days. Certain ZKTeco products (ZEM500-510-560-760, ZEM600-800, ZEM720, ZMM) allow access to sensitive information via direct requests for the form/DataApp?style=1 and form/DataApp?style=0 URLs. The…
• CVE-2023-4587, published 2023-09-04. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. An IDOR vulnerability has been found in ZKTeco ZEM800 product affecting version 6.60. This vulnerability allows a local attacker to obtain registered user backup files or device configuration files…