VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Aug 14, 2020· Updated Jun 17, 2026

CVE-2020-17474

CVE-2020-17474

Description

A token-reuse vulnerability in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0.0_20190723 allows an attacker to create arbitrary new users, elevate users to administrators, delete users, and download user faces from the database.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Zkteco/Zkbiosecurity Server2 versions
    cpe:2.3:a:zkteco:zkbiosecurity_server:1.0.0_20190723:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:zkteco:zkbiosecurity_server:1.0.0_20190723:*:*:*:*:*:*:*
    • (no CPE)range: 1.0.0_20190723
  • Zkteco/Facedepot 7b Firmware
    cpe:2.3:o:zkteco:facedepot_7b_firmware:1.0.213:*:*:*:*:*:*:*
  • ZKTeco/FaceDepot 7Bdescription
  • Zkteco/FaceDepot 7Bllm-fuzzy
    Range: 1.0.213

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.