CVE-2024-11049

Summary

CVE-2024-11049 is a recently disclosed vulnerability affecting ZKTeco ZKBio Time 9.0.1. This issue lies within an unknown function of the Image File Handler component, specifically the /auth_files/photo/ file. By manipulating this file, an attacker can initiate a direct request, potentially launching the attack remotely. The complexity of an attack is considered high, and its exploitability is reported as difficult. Unfortunately, the exploit for this vulnerability has been made public. Despite early notification to the vendor, they have not responded to the disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.