EUVD-2016-10813Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V13 - Configuration Default permission hardening
MITRE ATT&CK
1 technique across 1 tactic: Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Impact | CVSS 6.2 with AV:L (local attack vector) and PR:N (no privileges required) indicates moderate severity, but real-world exploitability is constrained by the local-only attack vector—an attacker must have local system access. The high confidentiality impact (C:H) is significant for biometric systems storing sensitive data. Exploitation is straightforward (AC:L, no user interaction required), and public POC availability increases practical risk. However, compared to network-based vulnerabilities, the local-only requirement substantially limits opportunistic exploitation. The privilege escalation tag suggests potential for escalating from low-privilege local access to system-level data exfiltration. Risk priority should be HIGH for organizations running ZKBioSecurity with untrusted local users or exposed endpoints, but MEDIUM for well-isolated deployments. |
| Exploit ScenarioDerived | An authenticated local user or an attacker with shell access to a server running ZKBioSecurity 3.0 crafts malicious file path requests containing directory traversal sequences (e.g., '../../../etc/passwd' or '..\..\..\windows\system32\config\sam') when interacting with the application's file retrieval API or configuration interface. The application fails to sanitize or validate the path parameter and directly accesses the requested file location, allowing the attacker to read configuration files (containing database credentials, API keys), application source code revealing additional vulnerabilities, or sensitive stored biometric data. Using the publicly available POC from Exploit-DB or PacketStorm Security, an attacker can automate extraction of multiple sensitive files for data exfiltration or further system compromise. In a privilege escalation scenario, this file disclosure could reveal system information enabling subsequent elevation of privileges. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 15, 2026
ZKTeco ZKBioSecurity 3.0 contains a local file path manipulation vulnerability (CWE-276) that allows unauthenticated attackers to bypass access controls and read arbitrary files including configuration files, source code, and application resources. A publicly available proof-of-concept exists, and the vulnerability has moderate real-world risk due to its local attack vector requirement but high confidentiality impact on sensitive biometric system data.
RemediationAI
Specific patch versions are not explicitly provided in available references. Recommended actions: (1) Contact ZKTeco directly for security patches or workarounds for ZKBioSecurity 3.0; (2) Implement operating system-level file access controls restricting application process permissions to only required directories; (3) Disable or restrict local access to affected ZKBioSecurity systems to only trusted administrators; (4) Monitor file access patterns for suspicious path traversal attempts; (5) Upgrade to a patched version if available from ZKTeco; (6) Review https://www.vulncheck.com/advisories/zkteco-zkbiosecurity-file-path-manipulation-vulnerability and vendor security bulletins for patch availability and official remediation guidance.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The vulnerability exploits improper file access control in ZKBioSecurity 3.0 (CPE: cpe:2.3:a:zkteco_inc.:zkteco_zkbiosecurity:*:*:*:*:*:*:*:*), a biometric security management system. The root cause falls under CWE-276 (Incorrect Default File Permissions), indicating the application fails to properly restrict file path operations when retrieving local resources. Attackers manipulate path parameters (likely directory traversal or symbolic link attacks) to access files outside intended directories. The vulnerability specifically targets the file retrieval mechanism that loads local application resources, suggesting improper input validation on file path parameters without adequate canonicalization or sandboxing.
Know when Zkteco Zkbiosecurity gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
3DescriptionCVE.org
ZKTeco ZKBioSecurity 3.0 contains a file path manipulation vulnerability that allows attackers to access arbitrary files by modifying file paths used to retrieve local resources. Attackers can manipulate path parameters to bypass access controls and retrieve sensitive information including configuration files, source code, and protected application resources.
Executive ViewAI
Organizations using ZKTeco ZKBioSecurity 3.0 should be aware of moderate risk from CVE-2016-20029, a incorrect default permissions vulnerability rated CVSS 6.2. Attackers could gain access beyond their authorized level. Proof-of-concept code is publicly available. Organizations should apply vendor updates when available and monitor for exploitation.
Apply vendor patch. If patching is delayed: manually tighten permissions on affected resources.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Exploit-DB
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Privilege escalation occurs when an attacker leverages flaws in access control mechanisms to gain permissions beyond what they were originally granted.
GitHub PoC