CVE-2023-38952

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2023-08-03 · updated 2026-07-09
Weakness: CWE-552

Description

Insecure access control in ZKTeco BioTime through 9.0.1 allows authenticated attackers to escalate their privileges due to the fact that session ids are not validated for the type of user accessing the application by default. Privilege restrictions between non-admin and admin users are not enforced and any authenticated user can leverage admin functions without restriction by making direct requests to administrative endpoints.

Affected products

ZKTeco BioTime: 8.5.5

References

https://claroty.com/team82/disclosure-dashboard/cve-2023-38952
https://github.com/omair2084/biotime-rce-8.5.5/blob/main/biotime_enum.py
https://krashconsulting.com/fury-of-fingers-biotime-rce/
https://claroty.com/team82/disclosure-dashboard/cve-2023-38952
https://sploitus.com/exploit?id=PACKETSTORM:177859

Get alerted when CVE-2023-38952 or the next vulnerability affects your stack