Description (CNA)
An undocumented configuration export port is accessible on some models of ZKTeco CCTV cameras. This port does not require authentication and exposes critical information about the camera such as open services and camera account credentials.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ZKTeco / SSC335-GC2063-Face-0b77 Solution Camera | affected 0 before V5.0.1.2.20260421; unaffected V5.0.1.2.20260421 |
CWE
CWE-288
References
- https://www.zkteco.com/en/announcement/23
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-139-04
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-139-04.json
ADP enrichment
No English description supplied.
No references supplied.