VYPR
← All advisories
High severity7.5NVD Advisory· Published Dec 6, 2022· Updated Jun 17, 2026

CVE-2021-39434

CVE-2021-39434

Description

A default username and password for an administrator account was discovered in ZKTeco ZKTime 10.0 through 11.1.0, builds 20180901, 20190510.1, 20200309.3, 20200930, 20201231, and 20210220.

Affected products

10
  • Zkteco/Zktime8 versions
    cpe:2.3:a:zkteco:zktime:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:zkteco:zktime:*:*:*:*:*:*:*:*range: >=10.0,<=11.1.0
    • cpe:2.3:a:zkteco:zktime:11.1.0:-:*:*:*:*:*:*
    • cpe:2.3:a:zkteco:zktime:11.1.0:20180901:*:*:*:*:*:*
    • cpe:2.3:a:zkteco:zktime:11.1.0:20190510.1:*:*:*:*:*:*
    • cpe:2.3:a:zkteco:zktime:11.1.0:20200309.3:*:*:*:*:*:*
    • cpe:2.3:a:zkteco:zktime:11.1.0:20200930:*:*:*:*:*:*
    • cpe:2.3:a:zkteco:zktime:11.1.0:20201231:*:*:*:*:*:*
    • cpe:2.3:a:zkteco:zktime:11.1.0:20210220:*:*:*:*:*:*
  • Zkteco/Zktime Webcpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: 10.0 - 11.1.0 (builds 20180901, 20190510.1, 20200930, 20201231, 20210220)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.