CVE-2016-20024— ZKTeco ZKTime.Net 3.0.1.6 Insecure File Permissions Privilege Escalation
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2016-20024
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ZKTeco ZKTime.Net 3.0.1.6 Insecure File Permissions Privilege Escalation
Source: NVD (National Vulnerability Database)
Vulnerability Description
ZKTeco ZKTime.Net 3.0.1.6 contains an insecure file permissions vulnerability that allows unprivileged users to escalate privileges by modifying executable files. Attackers can exploit world-writable permissions on the ZKTimeNet3.0 directory and its contents to replace executable files with malicious binaries for privilege escalation.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
文件和路径信息暴露
Source: NVD (National Vulnerability Database)
Vulnerability Title
ZKTeco ZKTime.Net 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
ZKTeco ZKTime.Net是中国熵基科技（ZKTeco）公司的一个考勤与时间管理软件。 ZKTeco ZKTime.Net 3.0.1.6版本存在安全漏洞，该漏洞源于文件权限不安全，可能导致未授权用户通过修改可执行文件提升权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| ZKTeco Inc. | ZKTeco ZKTime.Net | 3.0.1.6 | - |
II. Public POCs for CVE-2016-20024
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2016-20024
请登录查看更多情报信息。
- ZKTeco ZKTime.Net 3.0.1.6 Insecure File Permissions - CXSecurity.comthird-party-advisory
- IBM X-Force Exchangevdb-entry
- Packet Stormexploit
- Zero Science Lab » ZKTeco ZKTime.Net 3.0.1.6 Insecure File Permissionsthird-party-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2016-20024
Same Patch Batch · ZKTeco Inc. · 2026-03-15 · 9 CVEs total
| CVE-2016-20026 | 9.8 CRITICAL | ZKTeco ZKBioSecurity 3.0 Hardcoded Credentials Remote Code Execution |
| CVE-2016-20030 | 9.8 CRITICAL | ZKTeco ZKBioSecurity 3.0 User Enumeration via authLoginAction |
| CVE-2016-20025 | 8.8 HIGH | ZKTeco ZKAccess Professional 3.5.3 Privilege Escalation via Insecure Permissions |
| CVE-2016-20032 | 7.2 HIGH | ZKTeco ZKAccess Security System 5.3.1 Stored XSS |
| CVE-2016-20029 | 6.2 MEDIUM | ZKTeco ZKBioSecurity 3.0 File Path Manipulation Vulnerability |
| CVE-2016-20027 | 6.1 MEDIUM | ZKTeco ZKBioSecurity 3.0 Multiple Reflected XSS Vulnerabilities |
| CVE-2016-20031 | 5.5 MEDIUM | ZKTeco ZKBioSecurity 3.0 Local Authorization Bypass via visLogin.jsp |
| CVE-2016-20028 | 4.3 MEDIUM | ZKTeco ZKBioSecurity 3.0 Cross-Site Request Forgery Superadmin |
IV. Related Vulnerabilities
Same vendor: ZKTeco Inc.
- CVE-2016-20032
ZKTeco ZKAccess Security System 5.3.1 Stored XSS - CVE-2016-20031
ZKTeco ZKBioSecurity 3.0 Local Authorization Bypass via visL - CVE-2016-20030
ZKTeco ZKBioSecurity 3.0 User Enumeration via authLoginActio - CVE-2016-20029
ZKTeco ZKBioSecurity 3.0 File Path Manipulation Vulnerabilit - CVE-2016-20028
ZKTeco ZKBioSecurity 3.0 Cross-Site Request Forgery Superadm
Same weakness: CWE-538
- CVE-2023-54346
WordPress Plugin Backup Migration 1.2.8 Unauthenticated Data - CVE-2026-7071
CodeAstro Online Job Portal user-cvs file information disclo - CVE-2026-6160
code-projects Simple ChatBox Endpoint chatbox.sql SimpleChat - CVE-2019-25706
Across DR-810 ROM-0 Unauthenticated File Disclosure - CVE-2026-33705
Chamilo LMS has unauthenticated access to Twig template sour
V. Comments for CVE-2016-20024
No comments yet