CVE-2021-39434

CVSS V2 None CVSS V3 None
Description
A default username and password for an administrator account was discovered in ZKTeco ZKTime 10.0 through 11.1.0, builds 20180901, 20190510.1, 20200309.3, 20200930, 20201231, and 20210220.
Overview
  • CVE ID
  • CVE-2021-39434
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-12-06T00:15:09
  • Last Modified Date
  • 2022-12-08T16:15:42
Weakness Enumerations
CWE URL
CWE-521 http://cwe.mitre.org/data/definitions/521.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:zkteco:zktime:*:*:*:*:*:*:*:* 1 OR 10.0 11.1.0
cpe:2.3:a:zkteco:zktime:11.1.0:-:*:*:*:*:*:* 1 OR
cpe:2.3:a:zkteco:zktime:11.1.0:20180901:*:*:*:*:*:* 1 OR
cpe:2.3:a:zkteco:zktime:11.1.0:20190510.1:*:*:*:*:*:* 1 OR
cpe:2.3:a:zkteco:zktime:11.1.0:20200309.3:*:*:*:*:*:* 1 OR
cpe:2.3:a:zkteco:zktime:11.1.0:20200930:*:*:*:*:*:* 1 OR
cpe:2.3:a:zkteco:zktime:11.1.0:20201231:*:*:*:*:*:* 1 OR
cpe:2.3:a:zkteco:zktime:11.1.0:20210220:*:*:*:*:*:* 1 OR
References
Reference URL Reference Tags
https://www.cnvd.org.cn/flaw/show/CNVD-2018-26041
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2021-39434
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-39434
History
Created Old Value New Value Data Type Notes
2022-12-07 18:06:39 Added to TrackCVE
2022-12-07 18:15:33 2022-12-06T00:15:09.957 2022-12-06T00:15:09 CVE Published Date updated
2022-12-07 18:15:33 2022-12-06T00:18:15 CVE Modified Date updated
2022-12-07 18:15:33 Awaiting Analysis Undergoing Analysis Vulnerability Status updated
2022-12-08 17:15:31 2022-12-08T16:15:42 CVE Modified Date updated
2022-12-08 17:15:31 Undergoing Analysis Analyzed Vulnerability Status updated
2022-12-08 17:15:31 CWE-521 Weakness Enumeration new
2022-12-08 17:15:32 CPE Information updated