CVE-2023-38958

5.3 mediumEPSS 0.4%

Medium (5.3) in zkteco bioaccess ivs. EPSS 0.4% chance of exploitation in the next 30 days.

An access control issue in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to arbitrarily close and open the doors managed by the platform remotely via sending a crafted web request.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
CWE: CWE-863
Published: 2023-08-03
Modified: 2026-07-09
Record from: the NVD, synced 2026-10-19

Affected

zkteco:bioaccess_ivs

References

https://claroty.com/team82/disclosure-dashboard/cve-2023-38958
https://claroty.com/team82/disclosure-dashboard/cve-2023-38958

Check your stack JSON