Unrated severityNVD Advisory· Published Aug 14, 2020· Updated Aug 4, 2024

CVE-2020-17474

Description

A token-reuse vulnerability in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0.0_20190723 allows an attacker to create arbitrary new users, elevate users to administrators, delete users, and download user faces from the database.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

ZKTeco/FaceDepot 7Bdescription
Zkteco/FaceDepot 7Bllm-create
Range: 1.0.213
Zkteco/ZKBiosecurity Serverllm-create
Range: 1.0.0_20190723

Patches

Vulnerability mechanics

References

www.trendmicro.com/vinfo/us/threat-encyclopedia/vulnerability/8134/zkteco-facedepot-7b-10213-and-zkbiosecurity-server-10020190723-improper-privilege-vulnerabilitymitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000