CVE-2024-1706

Summary

CVE-2024-1706 is a newly disclosed vulnerability affecting the Department Name Search Bar in ZKTeco ZKBio Access IVS versions up to 3.3.2. This issue, classified as problematic, allows for remote cross-site scripting attacks through manipulation of the <marquee>hi input. The vulnerability has been made public and may be exploited without the need for authentication or user interaction. The vendor, ZKTeco, was notified of the disclosure but did not respond.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.