vulnwire
9.8crit

CVE-2016-20024

ZKTeco ZKTime.Net 3.0.1.6 Insecure File Permissions Privilege Escalation

Published 7 mo ago · modified 3 mo ago · JSON

CVSS
9.8
v3.1 · CNA
CISA KEV
No
not known exploited
EPSS
0.8%
percentile 56%
Public exploits
0
none known

ZKTeco ZKTime.Net 3.0.1.6 contains an insecure file permissions vulnerability that allows unprivileged users to escalate privileges by modifying executable files. Attackers can exploit world-writable permissions on the ZKTimeNet3.0 directory and its contents to replace executable files with malicious binaries for privilege escalation.

CISA SSVC assessment

Exploitation
Proof of concept public
Automatable
yes
Technical impact
total
Assessed
7 mo ago

Exploit prediction (EPSS)

0.76% probability of exploitation in the next 30 days, higher than 56% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
CNA4.09.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CNA3.19.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CNA4.09.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CNA3.19.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

  • ZKTeco Inc. ZKTeco ZKTime.Net

Classification

Weakness
  • CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory

References

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.