PT-2025-52831 · Zucchetti · Zucchetti Axess Cloki Access Control

Published 2025-12-23 · Updated 2025-12-23 · CVE-2021-47722

Positive Technologies (AI Summary)

CVSS v3.1

3.5

Low

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Zucchetti Axess CLOKI Access Control version 1.64

Description The software contains a cross-site request forgery condition. This allows attackers to manipulate access control settings without user interaction. Attackers can create malicious web pages with hidden forms to disable or modify access control parameters by tricking authenticated users into loading the page.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2021-47722

Affected Products

Zucchetti Axess Cloki Access Control

References · 6

• 🔥 https://exploit-db.com/exploits/50595 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47722 · Security Note
• https://zeroscience.mk/en/vulnerabilities/ZSL-2021-5689.php · Note
• https://axesstmc.com · Note
• https://vulncheck.com/advisories/zucchetti-axess-cloki-access-control-cross-site-request-forgery · Note
• https://twitter.com/CVEnew/status/2003567287962370262 · Twitter Post