CVE-2016-20031
MEDIUMZKTeco ZKBioSecurity 3.0 Local Authorization Bypass via visLogin.jsp
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2016-20031. PoCs published by LiquidWorm.
AI-analyzed exploit summary The vulnerability involves an authorization bypass in ZKTeco ZKBioSecurity 3.0 due to improper handling of the 'EnvironmentUtil.getClientIp(request)' method in visLogin.jsp, which allows local authentication bypass by setting the username to '127.0.0.1' and password to '123456'.
Description
ZKTeco ZKBioSecurity 3.0 contains a local authorization bypass vulnerability in visLogin.jsp that allows attackers to authenticate without valid credentials by spoofing localhost requests. Attackers can exploit the EnvironmentUtil.getClientIp() method which treats IPv6 loopback address 0:0:0:0:0:0:0:1 as 127.0.0.1 and authenticates using the IP as username with hardcoded password 123456 to access sensitive information and perform unauthorized actions.
Exploits (1)
The vulnerability involves an authorization bypass in ZKTeco ZKBioSecurity 3.0 due to improper handling of the 'EnvironmentUtil.getClientIp(request)' method in visLogin.jsp, which allows local authentication bypass by setting the username to '127.0.0.1' and password to '123456'.
References (6)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N