High severity7.5NVD Advisory· Published May 30, 2024· Updated Jun 17, 2026

CVE-2024-35431

Description

ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via photoBase64. An unauthenticated user can download local files from the server. NOTE: Third parties have indicated other versions are also vulnerable including up to 6.4.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

ZKTeco/ZKBio CVSecuritydescription
Mrojz/ZKT-Bio-CVSecurityllm-create
Range: <=6.4.1
Zkteco/ZKBio CVSecurity V6600llm-fuzzy
Range: <=6.4.1

Patches

Vulnerability mechanics

References

github.com/mrojz/ZKT-Bio-CVSecurity/blob/main/CVE-2024-35431.mdnvdExploit

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000