Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2023-4587

Insecure direct object reference in ZKTeco ZEM800

Description

An IDOR vulnerability has been found in ZKTeco ZEM800 product affecting version 6.60. This vulnerability allows a local attacker to obtain registered user backup files or device configuration files over a local network or through a VPN server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ZKTeco ZEM800

Default version status: unaffected

  • 6.60affected

References