PatchSiren

ZKSoftware Biometric Security Solutions CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL ZKSoftware Biometric Security Solutions CVE published 2024-03-05

CVE-2023-7103

Critical authentication bypass vulnerability in ZKSoftware UFace 5 biometric security devices allows unauthenticated remote attackers to bypass authentication mechanisms. The vulnerability, classified as Authentication Bypass by Primary Weakness (CWE-305), affects all versions through 12022024. Published March 5, 2024, with NVD record modified May 20, 2026. No known exploitation in ransomware campaigns pe [truncated]