CVE-2023-38950

HighCVSS 7.5/10Known exploited (CISA KEV)Last modified Jul 9, 2026

Description

A path traversal vulnerability in the iclock API of ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read arbitrary files via supplying a crafted payload. This vulnerability was fixed in version 9.0.120240617.19506 of ZKBioTime.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://claroty.com/team82/disclosure-dashboard/cve-2023-38950Third Party Advisory
https://claroty.com/team82/disclosure-dashboard/cve-2023-38950Third Party Advisory
https://sploitus.com/exploit?id=PACKETSTORM:177859Exploit
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-38950US Government Resource
https://www.fortinet.com/content/dam/fortinet/assets/reports/report-incident-response-middle-east.pdfBroken Link, Technical Description

Timeline

Published: Aug 3, 2023
Last modified: Jul 9, 2026
Added to CISA KEV: May 19, 2025
NVD status: Analyzed

Related CVEs from 2023

CVE-2023-389519.8ZKTeco BioTime 8.5.5 through 9.x before 9.0.1 (20240617.19506) allows authenticated attackers to create or overwrite arbitrary files on the CVE-2023-389527.5Insecure access control in ZKTeco BioTime through 9.0.1 allows authenticated attackers to escalate their privileges due to the fact that ses CVE-2023-389549.8ZKTeco BioAccess IVS v3.3.1 was discovered to contain a SQL injection vulnerability.CVE-2023-389557.5ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to obtain sensitive information about all managed devices, including their IP a CVE-2023-389567.5A path traversal vulnerability in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to read arbitrary files via supplying a craft CVE-2023-389585.3An access control issue in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to arbitrarily close and open the doors managed by t CVE-2023-38967.8Divide By Zero in vim/vim from 9.0.1367-1 to 9.0.1367-3 CVE-2023-389607.3Insecure Permissions issue in Raiden Professional Server RaidenFTPD v.2.4 build 4005 allows a local attacker to gain privileges and execute CVE-2023-389619.8Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0.0 allows a remote attacker to execute arbitrary code via the scanner_CVE-2023-389646.1Creative Item Academy LMS 6.0 was discovered to contain a cross-site scripting (XSS) vulnerability.CVE-2023-389659.8Lost and Found Information System 1.0 allows account takeover via username and password to a /classes/Users.php?f=save URI.CVE-2023-389695.4Cross Site Scripting vulnerabiltiy in Badaso v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the title p