Efe Özel

**Name of the Vulnerable Software and Affected Versions** ZKSoftware Biometric Security Solutions UFace 5 versions through 12022024 **Description** The issue is related to an Authentication Bypass by Primary Weakness vulnerability, which allows authentication bypass in ZKSoftware Biometric Security Solutions UFace 5. **Recommendations** For UFace 5 versions through 12022024, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Octopod versions prior to v1 **Description** The issue affects XPodas Octopod, allowing authentication bypass by primary weakness. This vulnerability enables unauthorized access. The vendor was contacted, and it was learned that the product is not supported. **Recommendations** For versions prior to v1, since the product is not supported, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** TMT Lockcell versions prior to 15 **Description** The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. **Recommendations** For versions prior to 15, update to version 15 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive database operations to minimize the risk of exploitation. Avoid using user-supplied input in SQL commands until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** TMT Lockcell versions prior to 15 **Description** The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability, which allows for Authentication Abuse and Authentication Bypass. **Recommendations** For versions prior to 15, update to version 15 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** TMT Lockcell versions prior to 15 **Description** The issue is related to an Unrestricted Upload of File with Dangerous Type vulnerability, which allows Command Injection in TMT Lockcell. **Recommendations** For versions prior to 15, update to version 15 or later to resolve the issue. As a temporary workaround, consider restricting file uploads to prevent command injection until a patch is available.

**Name of the Vulnerable Software and Affected Versions** TMT Lockcell versions prior to 15 **Description** The issue is related to the reliance on cookies without validation and integrity checking in a security decision, which allows for privilege abuse and authentication bypass. **Recommendations** For versions prior to 15, update to version 15 or later to resolve the issue.