Privilege Escalation Vulnerability in ZKTeco ZKTime.Net 3.0.1.6

What changed

ZKTeco has identified an insecure file permissions vulnerability in ZKTime.Net version 3.0.1.6. This flaw allows unprivileged users to escalate their privileges by modifying executable files within the application.

The vulnerability arises from world-writable permissions on the ZKTimeNet3.0 directory, enabling attackers to replace legitimate executable files with malicious binaries.

Who is affected

Organizations using ZKTeco's ZKTime.Net 3.0.1.6 are at risk of exploitation due to this vulnerability. The potential for privilege escalation can lead to unauthorized access and control over systems.

This issue primarily affects enterprises that rely on ZKTeco for time management and attendance solutions.

• ZKTeco ZKTime.Net 3.0.1.6 users
• Organizations utilizing biometric time management systems
• Companies with unprivileged user accounts that can access the application

What to do

It is crucial for affected organizations to assess their current deployment of ZKTime.Net and take immediate action to mitigate the risk associated with this vulnerability.

Implementing stricter file permissions and monitoring access to the ZKTimeNet3.0 directory can help prevent unauthorized modifications.

• Review and update file permissions for the ZKTimeNet3.0 directory.
• Monitor for any unauthorized changes to executable files.
• Consider updating to a patched version of ZKTime.Net once available.