VYPR

Smartec ST-FR043

by Zkteco

CVEs (3)

  • CVE-2023-3943CriMay 21, 2024
    risk 0.65cvss 10.0epss 0.01

    Stack-based Buffer Overflow vulnerability in ZkTeco-based OEM devices allows, in some cases, the execution of arbitrary code. Due to the lack of protection mechanisms such as stack canaries and PIE, it is possible to successfully execute code even under restrictive conditions. …

  • CVE-2023-3941CriMay 21, 2024
    risk 0.65cvss 10.0epss 0.01

    Relative Path Traversal vulnerability in ZkTeco-based OEM devices allows an attacker to write any file on the system with root privileges. This issue affects ZkTeco-based OEM devices (ZkTeco ProFace X, Smartec ST-FR043, Smartec ST-FR041ME and possibly others) with the…

  • CVE-2023-3940HigMay 21, 2024
    risk 0.49cvss 7.5epss 0.01

    Relative Path Traversal vulnerability in ZkTeco-based OEM devices allows an attacker to access any file on the system. This issue affects ZkTeco-based OEM devices (ZkTeco ProFace X, Smartec ST-FR043, Smartec ST-FR041ME and possibly others) with the…