← CVE Intelligence

CVE-2023-4587

Insecure direct object reference in ZKTeco ZEM800 PUBLISHED

Description (CNA)

An IDOR vulnerability has been found in ZKTeco ZEM800 product affecting version 6.60. This vulnerability allows a local attacker to obtain registered user backup files or device configuration files over a local network or through a VPN server.

Affected (CNA)

Vendor / productVersions
ZKTeco / ZEM800affected 6.60

CWE

CWE-639

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.