CVE-2022-36635
SQL injection in Zkteco Zkbiosecurity V5000
CVSS score
8.8
EPSS probability
%17.0
Risk score
1.5
Published
4 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
NVD reference
https://medium.com/stolabs/cve-2022-36635-a-sql-injection-in-zksecuritybio-to-rce-c5bde2962d47
Makefile Go / Python
Similar Vulnerabilities
7.5
CVE-2023-38950 Actively exploited
Path traversal in Zkteco Biotime
Z
Patch status unknownEPSS %92
9.8
CVE-2023-38951
Path traversal in Zkteco Biotime
Z
Patch status unknownEPSS %3
7.5
CVE-2023-38952
Vulnerability in Zkteco Biotime
Z
Patch status unknownEPSS %3
8.8
CVE-2022-36634
Incorrect authorization in Zkteco Zkbiosecurity V5000
Z
Patch status unknownEPSS %1
9.8
CVE-2023-38954
SQL injection in Zkteco Bioaccess Ivs
Z
Patch status unknownEPSS %1
7.5
CVE-2023-51142
Information exposure in Zkteco Biotime
Z
Patch status unknownEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2022-36635"