Hardcoded Cryptographic Key Vulnerability in ZKTeco ZKBio CVSecurity
CVE-2024-36526

Currently unrated

Key Information:

Vendor

ZKTeco

Status
ZKBio CVSecurity
Vendor
CVE Published:
9 July 2024

What is CVE-2024-36526?

ZKTeco's ZKBio CVSecurity version 6.1.1 has been found to include a hardcoded cryptographic key, which may allow unauthorized access and compromise the integrity of secured communications. This security flaw could enable attackers to exploit sensitive data, posing significant risks to user privacy and data protection. It is crucial for users to assess their systems and apply necessary remediation measures to safeguard against potential threats.

References

https://zkteco.eu/downloads/zkbio-cvsecurity-installation...
https://github.com/mrojz/ZKT-Bio-CVSecurity/blob/main/CVE...

Timeline

  • Vulnerability published

.