Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ZKTeco ZKAccess Professional 3.5.3 Privilege Escalation via Insecure Permissions
Vulnerability Description
ZKTeco ZKAccess Professional 3.5.3 contains an insecure file permissions vulnerability that allows authenticated users to escalate privileges by modifying executable files. Attackers can leverage the Modify permission granted to the Authenticated Users group to replace executable binaries with malicious code for privilege escalation.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
对外部实体的文件或目录可访问
Vulnerability Title
ZKTeco ZKAccess Professional 安全漏洞
Vulnerability Description
ZKTeco ZKAccess Professional是中国熵基科技（ZKTeco）公司的一个门禁管理软件。 ZKTeco ZKAccess Professional 3.5.3版本存在安全漏洞，该漏洞源于文件权限不安全，可能导致经验证用户通过修改可执行文件提升权限。
CVSS Information
N/A
Vulnerability Type
N/A