CVE-2024-13966CWE-1393
ZKTeco BioTime default password
Medium · published May 27, 2025
What it is
ZKTeco BioTime allows unauthenticated attackers to enumerate usernames and log in as any user with a password unchanged from the default value '123456'. Users should change their passwords (located under the Attendance Settings tab as "Self-Password").
The record
Technical detail
- CVSS v4.0
- 6.9 · MEDIUM
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
- EPSS
- 0.00416 · 34.9th percentile
- Weakness
- CWE-1393 · Use of Default Password
- Published
- 2025-05-27T18:35Z
EPSS history
Timeline