Medium severity5.9NVD Advisory· Published Aug 14, 2020· Updated Jun 17, 2026

CVE-2020-17473

Description

Lack of mutual authentication in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0.0_20190723 allows an attacker to obtain a long-lasting token by impersonating the server.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zkteco/Zkbiosecurity Server2 versions
cpe:2.3:a:zkteco:zkbiosecurity_server:1.0.0_20190723:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:zkteco:zkbiosecurity_server:1.0.0_20190723:*:*:*:*:*:*:*
- (no CPE)range: 1.0.0_20190723
Zkteco/Facedepot 7b Firmware
cpe:2.3:o:zkteco:facedepot_7b_firmware:1.0.213:*:*:*:*:*:*:*
ZKTeco/FaceDepot 7Bdescription
Zkteco/FaceDepot 7Bllm-fuzzy
Range: 1.0.213

Patches

Vulnerability mechanics

References

www.trendmicro.com/vinfo/us/threat-encyclopedia/vulnerability/8131/zkteco-facedepot-7b-10213-and-zkbiosecurity-server-10020190723-long-lasting-token-vulnerabilitynvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.384
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000