Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ZKTeco ZKBio Media Service Port 9999 download path traversal
Vulnerability Description
A vulnerability was found in ZKTeco ZKBio Media 2.0.0_x64_2024-01-29-1028. It has been classified as problematic. Affected is an unknown function of the file /pro/common/download of the component Service Port 9999. The manipulation of the argument fileName with the input ../../../../zkbio_media.sql leads to path traversal: '../filedir'. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.1.3 Build 2025-05-26-1605 is able to address this issue. It is recommended to upgrade the affected component.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
路径遍历：’../filedir’
Vulnerability Title
ZKTeco ZKBio Media 安全漏洞
Vulnerability Description
ZKTeco ZKBio Media是中国ZKTeco公司的一个集视频播放、图片、音频等多媒体信息于一体的数字标牌平台，提供基于“视觉呈现”的信息发布解决方案。 ZKTeco ZKBio Media 2.0.0_x64_2024-01-29-1028版本存在安全漏洞，该漏洞源于文件/pro/common/download的参数fileName会导致路径遍历。
CVSS Information
N/A
Vulnerability Type
N/A