PT-2022-10917 · Zkteco · Zktime

Published 2022-12-05 · Updated 2022-12-08 · CVE-2021-39434

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ZKTeco ZKTime versions 10.0 through 11.1.0

Description A default username and password for an administrator account was discovered.

Recommendations For ZKTeco ZKTime versions 10.0 through 11.1.0, consider changing the default administrator username and password to prevent unauthorized access.

Fix

Weakness Enumeration

CWE-521

Related Identifiers

CVE-2021-39434

Affected Products

Zktime

References · 3

• https://osv.dev/vulnerability/CVE-2021-39434 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-39434 · Security Note
• https://cnvd.org.cn/flaw/show/CNVD-2018-26041 · Note