CVE-2023-38955

7.5 highEPSS 0.6%

High (7.5) in zkteco bioaccess ivs. EPSS 0.6% chance of exploitation in the next 30 days.

ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to obtain sensitive information about all managed devices, including their IP addresses and device names.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 48% of CVEs (scores of 2026-10-31)
CWE: CWE-668
Published: 2023-08-03
Modified: 2026-07-09
Record from: the NVD, synced 2026-10-19

Affected

zkteco:bioaccess_ivs

References

https://claroty.com/team82/disclosure-dashboard/cve-2023-38955
https://claroty.com/team82/disclosure-dashboard/cve-2023-38955

Check your stack JSON