CVE-2023-38950 ZKTeco BioTime
ZKTeco BioTime contains a path traversal vulnerability in the iclock API that allows an unauthenticated attacker to read arbitrary files via supplying a crafted payload.
- CVSS
- not scored
On CISA’s exploited list
ZKTeco BioTime Path Traversal Vulnerability
- Added
- 2025-05-19
- Federal patch deadline
- 2025-06-09
- Ransomware use
- not known