CVE-2022-42953
HIGH EXPLOITEDZKTeco ZEM and ZMM Firmware - Unauthenticated Sensitive Information Exposure via Direct Request
Title source: llmExploitation Summary
CVE-2022-42953 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including RedTeam Pentesting GmbH.
AI-analyzed exploit summary The exploit details a missing authentication vulnerability in ZKTeco ZEM/ZMM devices, allowing unauthenticated access to sensitive employee data and credentials via specific URLs. The proof of concept demonstrates how to retrieve backup files and user details without authentication.
Description
Certain ZKTeco products (ZEM500-510-560-760, ZEM600-800, ZEM720, ZMM) allow access to sensitive information via direct requests for the form/DataApp?style=1 and form/DataApp?style=0 URLs. The affected versions may be before 8.88 (ZEM500-510-560-760, ZEM600-800, ZEM720) and 15.00 (ZMM200-220-210). The fixed versions are firmware version 8.88 (ZEM500-510-560-760, ZEM600-800, ZEM720) and firmware version 15.00 (ZMM200-220-210).
Exploits (1)
The exploit details a missing authentication vulnerability in ZKTeco ZEM/ZMM devices, allowing unauthenticated access to sensitive employee data and credentials via specific URLs. The proof of concept demonstrates how to retrieve backup files and user details without authentication.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N