https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:07:22 +0000 https://cve.radiocsirt.org/vuln/cve-2023-3938 <p><strong>Affected:</strong> ZkTeco-based OEM devices with firmware ZAM170-NF-1.8.25-7354-Ver1.0.0, zkteco smartec_st_fr043, zkteco smartec_st_fr041me, zkteco facedepot_7b</p> <p>Improper Neutralization of Special Elements used in an SQL Command (&#39;SQL Injection&#39;) vulnerability in ZkTeco-based OEM devices allows an attacker to authenticate under any user from the device database.</p> <p>This issue affects</p> <p>ZkTeco-based OEM devices (ZkTeco ProFace X, Smartec ST-FR043, Smartec ST-FR041ME and possibly others) with the ZAM170-NF-1.8.25-7354-Ver1.0.0 and possibly others.</p> <p><strong>Affected:</strong> ZkTeco-based OEM devices with firmware ZAM170-NF-1.8.25-7354-Ver1.0.0, zkteco smartec_st_fr043, zkteco smartec_st_fr041me, zkteco facedepot_7b</p> <p>Improper Neutralization of Special Elements used in an SQL Command (&#39;SQL Injection&#39;) vulnerability in ZkTeco-based OEM devices allows an attacker to authenticate under any user from the device database.</p> <p>This issue affects</p> <p>ZkTeco-based OEM devices (ZkTeco ProFace X, Smartec ST-FR043, Smartec ST-FR041ME and possibly others) with the ZAM170-NF-1.8.25-7354-Ver1.0.0 and possibly others.</p> https://cve.radiocsirt.org/vuln/cve-2023-3938