CVE-2020-17473 – Lack of mutual authentication in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosec

Lack of mutual authentication in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0.0_20190723 allows an attacker to obtain a long-lasting token by impersonating the server.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17473

Reference (s):

• https://www.trendmicro.com/vinfo/us/threat-encyclopedia/vulnerability/8131/zkteco-facedepot-7b-10213-and-zkbiosecurity-server-10020190723-long-lasting-token-vulnerability