vendor:
ZKBioSecurity 3.0
by:
Gjoko 'LiquidWorm' Krstic
7,5
CVSS
HIGH
Hardcoded Credentials Remote SYSTEM Code Execution
798
CWE
Product Name: ZKBioSecurity 3.0
Affected Version From: 3.0.1.0_R_230
Affected Version To: 3.0.1.0_R_230
Patch Exists: YES
Related CWE: N/A
CPE: a:zkteco:zkbiosafety:3.0.1.0_r_230
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Microsoft Windows 7 Ultimate SP1 (EN), Microsoft Windows 7 Professional SP1 (EN), Apache-Coyote/1.1, Apache Tomcat/7.0.56
2016
ZKTeco ZKBioSecurity 3.0 Hardcoded Credentials Remote SYSTEM Code Execution
The ZKBioSecurity solution suffers from a use of hard-coded credentials. The application comes bundled with a pre-configured apache tomcat server and an exposed 'manager' application that after authenticating with the credentials: username: zkteco, password: zkt123, located in tomcat-users.xml file, it allows malicious WAR archive containing a JSP application to be uploaded, thus giving the attacker the ability to execute arbitrary code with SYSTEM privileges.
Mitigation:
Ensure that hard-coded credentials are not used in the application and that the application is configured to use secure authentication methods.
