Filtered by vendor Zkteco Subscriptions
Filtered by product Zktime Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2016-20024 1 Zkteco 2 Zktime, Zktime.net 2026-07-28 9.8 Critical
ZKTeco ZKTime.Net 3.0.1.6 contains an insecure file permissions vulnerability that allows unprivileged users to escalate privileges by modifying executable files. Attackers can exploit world-writable permissions on the ZKTimeNet3.0 directory and its contents to replace executable files with malicious binaries for privilege escalation.
CVE-2021-39434 1 Zkteco 1 Zktime 2025-04-24 7.5 High
A default username and password for an administrator account was discovered in ZKTeco ZKTime 10.0 through 11.1.0, builds 20180901, 20190510.1, 20200309.3, 20200930, 20201231, and 20210220.