VYPR
← All advisories
Unrated severityCISA KEVNVD Advisory· Published Aug 3, 2023· Updated Nov 4, 2025

CVE-2023-38950

CVE-2023-38950

Description

A path traversal vulnerability in the iclock API of ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read arbitrary files via supplying a crafted payload. This vulnerability was fixed in version 9.0.120240617.19506 of ZKBioTime.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Zkteco/BioTimecpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: <=8.5.5

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.