CVE-2022-36634 - An access control issue in ZKTeco ZKBioSecurity V5000 3.0.5_r allows attackers to arbitrarily create admin users via a crafted HTTP request

HIGH

An access control issue in ZKTeco ZKBioSecurity V5000 3.0.5_r allows attackers to arbitrarily create admin users via a crafted HTTP request

Published Oct 7, 2022

8.8

HIGH

CVSS 3.1

EPSS 1.22%

An access control issue in ZKTeco ZKBioSecurity V5000 3.0.5_r allows attackers to arbitrarily create admin users via a crafted HTTP request.

No remediation recorded yet.

Weaknesses (1)

CWE-863

Incorrect Authorization

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-39337		Advisory
https://seclists.org/fulldisclosure/2022/Sep/29		ExploitMailing ListThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Oct 7, 2022

Updated Jul 9, 2026

Reserved Jul 25, 2022

Updated n/a

Status Modified

Modified Jul 9, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Oct 7, 2022

Updated Jul 9, 2026

Exploited since n/a