Bioaccess Ivs vulnerabilities

2 known vulnerabilities in Bioaccess Ivs from ZkTeco. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Bioaccess Ivs: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-38956Aug 3, 2023ZkTeco

  A path traversal vulnerability in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to read arbitrary files via supplying a crafted payload.

• 7.5 High severity

  Bioaccess Ivs: Exposure of Resource to Wrong Sphere

  CVE-2023-38955Aug 3, 2023ZkTeco

  ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to obtain sensitive information about all managed devices, including their IP addresses and device names.