CVE-2023-38954

Critical · CVSS 9.8

ZKTeco BioAccess IVS — SQL Injection

CVSS: 9.8; nvd
EPSS: —
KEV: No
Class: other; CWE-89

Description

ZKTeco BioAccess IVS v3.3.1 was discovered to contain a SQL injection vulnerability.

Search profile — drives PoC discovery

Symbols BioAccess IVSZKTecoSQL injectionbioaccessivs

Keywords CVE-2023-38954ZKTeco BioAccess IVS SQL injectionBioAccess IVS v3.3.1ZKTeco SQLi PoCBioAccess IVS exploitCWE-89 ZKTecoClaroty Team82 CVE-2023-38954

Versions: v3.3.1

References

https://claroty.com/team82/disclosure-dashboard/cve-2023-38954
http://zkteco.com
https://claroty.com/team82/disclosure-dashboard/cve-2023-38954

Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-05T18:30:39.000Z