Critical severity10.0NVD Advisory· Published May 21, 2024· Updated Apr 15, 2026

CVE-2023-3941

Description

Relative Path Traversal vulnerability in ZkTeco-based OEM devices allows an attacker

to write any file on the system with root privileges.

This issue affects ZkTeco-based OEM devices (ZkTeco ProFace X, Smartec ST-FR043, Smartec ST-FR041ME and possibly others) with the ZAM170-NF-1.8.25-7354-Ver1.0.0 and possibly others.

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

github.com/klsecservices/Advisories/blob/master/K-ZkTeco-2023-003.mdnvd

News mentions

No linked articles in our index yet.

cvss	0.650
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000