CVE-2024-35430

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-35430
In ZKTeco ZKBio CVSecurity v6.1.1_R and earlier (fixed in 6.1.3_R) an authenticated user can bypass password checks while exporting data from the application.
CVSS

No CVSS.

References
Link Resource
https://github.com/mrojz/ZKT-Bio-CVSecurity/blob/main/CVE-2024-35430.md Exploit
https://github.com/mrojz/ZKT-Bio-CVSecurity/blob/main/CVE-2024-35430.md Exploit
https://www.zkteco.com/en/Security_Bulletinsibs/16
Configurations

Configuration 1 (hide)

cpe:2.3:a:zkteco:zkbio_cvsecurity:6.1.1:*:*:*:*:*:*:*
History

09 Jul 2025, 17:15

Type Values Removed Values Added
Summary In ZKTeco ZKBio CVSecurity v6.1.1 an authenticated user can bypass password checks while exporting data from the application. In ZKTeco ZKBio CVSecurity v6.1.1_R and earlier (fixed in 6.1.3_R) an authenticated user can bypass password checks while exporting data from the application.
References
  • () https://www.zkteco.com/en/Security_Bulletinsibs/16 -

17 Jun 2025, 19:36

Type Values Removed Values Added
First Time Zkteco
Zkteco zkbio Cvsecurity
CPE cpe:2.3:a:zkteco:zkbio_cvsecurity:6.1.1:*:*:*:*:*:*:*
References () https://github.com/mrojz/ZKT-Bio-CVSecurity/blob/main/CVE-2024-35430.md - () https://github.com/mrojz/ZKT-Bio-CVSecurity/blob/main/CVE-2024-35430.md - Exploit

30 May 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-30 16:15

Updated : 2025-07-09 17:15

NVD link : CVE-2024-35430

Mitre link : CVE-2024-35430

JSON object : View

Products Affected

zkteco

  • zkbio_cvsecurity
CWE

No CWE.