CVE-2023-3943

CriticalCVSS 10.0/10Last modified Jun 17, 2026

Description

Stack-based Buffer Overflow vulnerability in ZkTeco-based OEM devices allows, in some cases, the execution of arbitrary code. Due to the lack of protection mechanisms such as stack canaries and PIE, it is possible to successfully execute code even under restrictive conditions.

This issue affects ZkTeco-based OEM devices (ZkTeco ProFace X, Smartec ST-FR043, Smartec ST-FR041ME and possibly others)

with firmware ZAM170-NF-1.8.25-7354-Ver1.0.0 and possibly others.

Metrics

CVSS 3.1 10.0/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-121

Affected software

No affected versions have been published.

Timeline

Published
May 21, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-394317.8Sante DICOM Viewer Pro lacks proper validation of user-supplied data when parsing DICOM files. This could lead to an out-of-bounds write. AnCVE-2023-394327.8Improper access control element in some Intel(R) Ethernet tools and driver install software, before versions 28.2, may allow an authenticateCVE-2023-394334.4Improper access control for some Intel(R) CST software before version 2.1.10300 may allow an authenticated user to potentially enable escalaCVE-2023-394348.8A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma CVE-2023-394359.8Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 CVE-2023-394365.8SAP Supplier Relationship Management -versions 600, 602, 603, 604, 605, 606, 616, 617, allows an unauthorized attacker to discover informatiCVE-2023-394375.4SAP business One allows - version 10.0, allows an attacker to insert malicious code into the content of a web page or application and gets iCVE-2023-394388.1A missing authorization check allows an arbitrary authenticated user to perform certain operations through the API of CLA-assistant by execuCVE-2023-394399.8SAP Commerce Cloud may accept an empty passphrase for user ID and passphrase authentication, allowing users to log into the system without aCVE-2023-39446.1A vulnerability was found in phpscriptpoint Lawyer 1.6 and classified as problematic. Affected by this issue is some unknown functionality oCVE-2023-394404.4In SAP BusinessObjects Business Intelligence - version 420, If a user logs in to a particular program, under certain specific conditions meCVE-2023-394415.9Apache Airflow SMTP Provider before 1.3.0, Apache Airflow IMAP Provider before 3.3.0, and Apache Airflow before 2.7.0 are affected by the Va
CVE-2023-3943: Critical severity, CVSS 10.0 | Vulnix