Vulnerabilities > Zkteco > Zkbio Cvsecurity > 6.4.1.r

DATE CVE VULNERABILITY TITLE RISK
2025-05-13 CVE-2025-45746 Use of Hard-coded Credentials vulnerability in Zkteco Zkbio Cvsecurity 6.4.1R
In ZKT ZKBio CVSecurity 6.4.1_R an unauthenticated attacker can craft JWT token using the hardcoded secret to authenticate to the service console.
network
low complexity
zkteco CWE-798
critical
9.8