CVE-2022-36634 Information

Description

An access control issue in ZKTeco ZKBioSecurity V5000 3.0.5_r allows attackers to arbitrarily create admin users via a crafted HTTP request.

Reference

https://seclists.org/fulldisclosure/2022/Sep/29 http://zkbiosecurity.com http://zkteco.com