Notice Regarding Security Vulnerability in BioTime (Path Transversal Vulnerability)

2025-05-12
Notice Regarding Security Vulnerability in BioTime (Access Control Security Vulnerability)

2025-05-12
ZKTeco’s ZKBio CVSecurity and ZKBioTime Receive Safe-to-Host Certifications from Indusface

2025-03-25
System Issues Resolved

2024-06-24
System Update Notification

2024-06-14
ZKTeco PSIRT

2021-08-20

Notice Regarding Security Vulnerability in BioTime (Path Transversal Vulnerability)

2025-05-12

Vulnerability Details

Vulnerability Numbers: CVE-2023-38950, CVE-2023-38951

Scope of Impact: BioTime v8.5.5 and earlier

Vulnerability Overview: A path traversal vulnerability exists. Successful exploitation may allow unauthorized access to system files, potentially leading to data leakage.

Vulnerability Solution

A. This vulnerability has been addressed in ZKBioTime version 9.0.1 (20240617.19506). It is strongly recommended to update to the latest version. The installation package can be downloaded from the official website.

Contact Information

A. Please email xmtam@zkteco.com to obtain the patch package for the fixed version.

B. You may call the ZKTeco customer service hotline at 400-6900-999 to request the patch package for the repaired version.

C. You may also contact the ZKTeco branch in your region to obtain the patch package for the repaired version.

Notice Regarding Security Vulnerability in BioTime (Path Transversal Vulnerability)

Notice Regarding Security Vulnerability in BioTime (Access Control Security Vulnerability)

ZKTeco’s ZKBio CVSecurity and ZKBioTime Receive Safe-to-Host Certifications from Indusface

System Issues Resolved

System Update Notification

ZKTeco PSIRT

Notice Regarding Security Vulnerability in BioTime (Path Transversal Vulnerability)