facedepot_7b vulnerabilities

5 known vulnerabilities in facedepot_7b from ZkTeco. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  ZkTeco-based OEM devices with firmware…: Stack-based Buffer Overflow

  CVE-2023-3943May 21, 2024ZkTeco

  Stack-based Buffer Overflow vulnerability in ZkTeco-based OEM devices allows, in some cases, the execution of arbitrary code. Due to the lack of protection mechanisms such as stack canaries and PIE, it is possible to successfully execute code even under restri

• 7.5 High severity

  ZkTeco-based OEM devices with firmware…: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-3942May 21, 2024ZkTeco

  An 'SQL Injection' vulnerability, due to improper neutralization of special elements used in SQL commands, exists in ZKTeco-based OEM devices. This vulnerability allows an attacker to, in some cases, impersonate another user or perform unauthorized actions. In

• 10.0 Critical severity

  ZkTeco-based OEM devices with firmware…: Relative Path Traversal

  CVE-2023-3941May 21, 2024ZkTeco

  Relative Path Traversal vulnerability in ZkTeco-based OEM devices allows an attacker to write any file on the system with root privileges. This issue affects ZkTeco-based OEM devices (ZkTeco ProFace X, Smartec ST-FR043, Smartec ST-FR041ME and possibly others)

• 7.5 High severity

  ZkTeco-based OEM devices with firmware…: Relative Path Traversal

  CVE-2023-3940May 21, 2024ZkTeco

  Relative Path Traversal vulnerability in ZkTeco-based OEM devices allows an attacker to access any file on the system. This issue affects ZkTeco-based OEM devices (ZkTeco ProFace X, Smartec ST-FR043, Smartec ST-FR041ME and possibly others) with the ZAM170-NF-1

• 10.0 Critical severity

  ZkTeco-based OEM devices with firmware…: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-3939May 21, 2024ZkTecoEPSS 1.32%

  Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in ZkTeco-based OEM devices allows OS Command Injection. Since all the found command implementations are executed from the superuser, their impact is the m