VYPR
Unrated severityNVD Advisory· Published May 27, 2025· Updated Jul 14, 2025

ZKTeco BioTime default password

CVE-2024-13966

Description

ZKTeco BioTime allows unauthenticated attackers to enumerate usernames and log in as any user with a password unchanged from the default value '123456'. Users should change their passwords (located under the Attendance Settings tab as "Self-Password").

Affected products

2
  • Zkteco/BioTimellm-create2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: *

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.