Zkteco Attendance Management Software 488 Patched !!link!! ◆

If default password issues were not alarming enough, consider CVE‑2023‑38950: a path traversal vulnerability in the iclock API of ZKTeco BioTime. Tracked with a CVSS score of 7.5 (High severity), this flaw allows unauthenticated attackers to read arbitrary files on the server by supplying a crafted payload, thereby bypassing access restrictions.