CVE-2023-3943
Assigner: Kaspersky
Published: 2024-05-21T13:32:47.870Z
State: PUBLISHED
affected: defaultStatus: unknown
product: ZkTeco-based OEM devices with firmware ZAM170-NF-1.8.25-7354-Ver1.0.0
vendor: ZkTeco
versions: status: affected
version: ZAM170-NF-1.8.25-7354-Ver1.0.0
credits: type: finder
value: The vulnerability was discovered by Georgy Kiguradze from Kaspersky
descriptions: supportingMedia: base64: no
type: text/html
value: Stack-based Buffer Overflow vulnerability in ZkTeco-based OEM devices allows, in some cases, the execution of arbitrary code. Due to the lack of protection mechanisms such as stack canaries and PIE, it is possible to successfully execute code even under restrictive conditions.<br><p>
This issue affects 
ZkTeco-based OEM devices (ZkTeco ProFace X, Smartec ST-FR043, Smartec ST-FR041ME and possibly others)

 with firmware 
ZAM170-NF-1.8.25-7354-Ver1.0.0 and possibly others.



</p>
value: Stack-based Buffer Overflow vulnerability in ZkTeco-based OEM devices allows, in some cases, the execution of arbitrary code. Due to the lack of protection mechanisms such as stack canaries and PIE, it is possible to successfully execute code even under restrictive conditions.

This issue affects 
ZkTeco-based OEM devices (ZkTeco ProFace X, Smartec ST-FR043, Smartec ST-FR041ME and possibly others)

 with firmware 
ZAM170-NF-1.8.25-7354-Ver1.0.0 and possibly others.
impacts: capecId: CAPEC-100
descriptions: value: CAPEC-100: Overflow Buffers
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 10
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-121
description: CWE-121: Stack-based Buffer Overflow
type: CWE
source: discovery: UNKNOWN
timeline: time: 2023-05-01T21:00:00.000Z
value: Vulnerability discovered.
time: 2023-09-19T14:00:00.000Z
value: Initial request to PSIRT@zkteco.com.
time: 2023-10-03T13:18:00.000Z
value: Follow-up with PSIRT@zkteco.com due to no initial response.
time: 2023-12-20T10:46:00.000Z
value: Vulnerability reported to PSIRT@zkteco.com in plaintext.
time: 2024-05-21T13:32:00.000Z
value: No response from vendor; CVE details added to CVE.org.
title: Multiple buffer overflow in ZkTeco-based OEM devices
x_generator: engine: Vulnogram 0.2.0