ZKTeco Co — Vulnerabilities & Security Advisories 4

ZKTeco specializes in biometric identification and access control systems, serving enterprises and government facilities with time attendance, access management, and surveillance solutions. Historically, their products have been vulnerable to remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from insufficient input validation and insecure default configurations. The company has faced scrutiny for multiple vulnerabilities affecting its web interfaces and mobile applications, with four CVEs documenting issues that could allow unauthorized access or system compromise. Security researchers have highlighted poor encryption practices and hardcoded credentials as recurring concerns, though no major public security incidents have been widely reported.