CVE-2025-55279— Hard-coded Private Key Vulnerability in ZKTeco WL20
Quick assessment
Affected
ZKTeco Co WL20 Biometric Attendance System
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
ZKTeco WL20是中国熵基科技（ZKTeco）公司的一款智能指纹考勤机。 ZKTeco WL20存在信任管理问题漏洞，该漏洞源于设备固件中存储了硬编码的私钥，可能导致物理访问攻击者提取私钥并执行未经授权的解密和中间人攻击。
Possible ATT&CK Techniques 3 AI
T1552.004 · Private Keys T1056.001 · Keylogging T1056.004 · Credential API Hooking
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-55279
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Hard-coded Private Key Vulnerability in ZKTeco WL20
Source: CVE Program / CVE List V5
Vulnerability Description
This vulnerability exists in ZKTeco WL20 due to hard-coded private key stored in plaintext within the device firmware. An attacker with physical access could exploit this vulnerability by extracting the firmware and analyzing the binary data to retrieve private key stored in the firmware of the targeted device.
Successful exploitation of this vulnerability could allow the attacker to perform unauthorized decryption of sensitive data and Man-in-the-Middle (MitM) attacks on the targeted device.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
使用硬编码的凭证
Source: CVE Program / CVE List V5
Vulnerability Title
ZKTeco WL20 信任管理问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
ZKTeco WL20是中国熵基科技（ZKTeco）公司的一款智能指纹考勤机。 ZKTeco WL20存在信任管理问题漏洞，该漏洞源于设备固件中存储了硬编码的私钥，可能导致物理访问攻击者提取私钥并执行未经授权的解密和中间人攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| ZKTeco Co | WL20 Biometric Attendance System | <=ZLM31-FXO1-3.1.8 | - |
|
II. Public POCs for CVE-2025-55279
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-55279
请登录查看更多情报信息。
Vendor Advisories for CVE-2025-55279 (1)
-
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2025-0172 third-party-advisory
Same Patch Batch · ZKTeco Co · 2025-08-13 · 4 CVEs total
| CVE-2025-54464 | Cleartext Storage Vulnerability in ZKTeco WL20 | |
| CVE-2025-54465 | Hard-coded Credentials Vulnerability in ZKTeco WL20 | |
| CVE-2025-55280 | Information Disclosure Vulnerability in ZKTeco WL20 |
IV. Related Vulnerabilities
Same weakness: CWE-798
-
CVE-2026-86555
Hardcoded Key Vulnerability in ZTE SmartLife APP -
CVE-2026-93970
aiyiyi121 SxDevOps Settings settings.py hard-coded credentia -
CVE-2026-93969
aiyiyi121 SxDevOps services.py ensure_default_superuser hard -
CVE-2026-84034
IBM Guardium Data Protection is affected by multiple vulnera -
CVE-2026-77960
Use of Hard-coded Credentials in Bransys ELD
V. Comments for CVE-2025-55279
No comments yet