CVE:CVE-2022-42953
CNNVD:CNNVD-202210-2108
ZKTeco ZEM/ZMM Web Interface是中国ZKTeco公司的一个考勤设备的 web 界面。
ZKTeco ZEM/ZMM Web Interface 存在安全漏洞，该漏洞源于存在身份验证缺失问题。
solution:Upgrade zkteco zmm200_firmware to a higher version than 15.00,and avoid the version (,15.00); Upgrade zkteco zmm210_firmware to a higher version than 15.00,and avoid the version (,15.00); Upgrade zkteco zmm220_firmware to a higher version than 15.00,and avoid the version (,15.00); Upgrade zkteco zem720_firmware to a higher version than 8.88,and avoid the version (,8.88); Upgrade zkteco zem600_firmware to a higher version than 8.88,and avoid the version (,8.88); Upgrade zkteco zem800_firmware to a higher version than 8.88,and avoid the version (,8.88); Upgrade zkteco zem510_firmware to a higher version than 8.88,and avoid the version (,8.88); Upgrade zkteco zem560_firmware to a higher version than 8.88,and avoid the version (,8.88); Upgrade zkteco zem760_firmware to a higher version than 8.88,and avoid the version (,8.88); Upgrade zkteco zem500_firmware to a higher version than 8.88,and avoid the version (,8.88)