CVE-2022-42953 — CVE-2022-42953

CVE-2022-42953

HIGH · CVSS 7.5

EPSS exploitation probability: 0%

Published 2022-12-25T05:15:10.433 · Last modified 2026-06-17T05:05:39.780

Summary

Certain ZKTeco products (ZEM500-510-560-760, ZEM600-800, ZEM720, ZMM) allow access to sensitive information via direct requests for the form/DataApp?style=1 and form/DataApp?style=0 URLs. The affected versions may be before 8.88 (ZEM500-510-560-760, ZEM600-800, ZEM720) and 15.00 (ZMM200-220-210). The fixed versions are firmware version 8.88 (ZEM500-510-560-760, ZEM600-800, ZEM720) and firmware version 15.00 (ZMM200-220-210).

Affected products

zkteco — zmm200_firmware

Does this affect you?

Add your gear to cvedb and we'll alert you only when zkteco ships something exploited.

Check my exposure →

References

NVD entry
CVE.org record

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.