CVE-2022-36635

ZKteco ZKBioSecurity V5000 4.1.3 was discovered to contain a SQL injection vulnerability via the component /baseOpLog.do.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

16.72% chance of exploitation in the next 30 days, 97th percentile

Published

2022-10-07

Updated

2026-07-09

Proof-of-concept exploits (1)

• https://medium.com/stolabs/cve-2022-36635-a-sql-injection-in-zksecuritybio-to-rce-c5bde29…

References

• CVE Record
• NVD entry

Related

• CVE-2022-36634
• CVE-2022-36636
• CVE-2022-36633
• CVE-2022-36637
• CVE-2022-3663
• CVE-2022-36638