CNNVD-202508-1368 Information

CNNVD ID

CNNVD-202508-1368

CVE-2025-55280

  • CNNVD Published: 2025-08-13

Description (Chinese)

ZKTeco WL20是中国熵基科技(ZKTeco)公司的一款智能指纹考勤机。 ZKTeco WL20存在安全漏洞,该漏洞源于设备固件中存储了明文Wi-Fi凭据和配置数据,可能导致物理访问攻击者获取网络访问权限并操纵数据。

Description (English)

ZKTeco WL20 is a smart fingerprinting machine for ZKTeco. There is a security loophole in ZKTeco WL20, which stems from the storage of explicit Wi-Fi supporting and configured data in equipment solids, which may result in physical access to the network and manipulation of data.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

熵基科技

Published

2025-08-13

Last Modified

2026-02-24

References

https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2025-0172

Share on: