{"id":1222,"date":"2025-01-13T13:46:00","date_gmt":"2025-01-13T13:46:00","guid":{"rendered":"https:\/\/fusionmindlabs.com\/blogs\/2025\/01\/13\/24-bugs-in-chinese-biometric-devices-compromise-data\/"},"modified":"2025-01-13T14:15:03","modified_gmt":"2025-01-13T14:15:03","slug":"24-bugs-in-chinese-biometric-devices-compromise-data","status":"publish","type":"post","link":"https:\/\/fusionmindlabs.com\/blogs\/24-bugs-in-chinese-biometric-devices-compromise-data\/","title":{"rendered":"24 Bugs in Chinese Biometric Devices Compromise Data"},"content":{"rendered":"\n<\/p>\n

Vulnerabilities Found in Hybrid Biometric Terminal Produced by Chinese Manufacturer ZKTeco<\/h1>\n

Display Video Article in News Article for the Custom Next Story<\/h2>\n

Modifying the Body Placing Embeds, Promoslots, Related Etc.<\/h3>\n
\"<p>All
All findings were proactively shared with the manufacturer before public disclosure.<\/span><\/figcaption><\/figure>\n

<\/p>\n

Researchers have identified 24 vulnerabilities in the hybrid biometric terminal produced by Chinese manufacturer ZKTeco. According to the cybersecurity company Kaspersky, by adding random user data to the database or using a fake QR code, a threat actor can easily bypass the verification process and gain unauthorized access. Attackers can also steal and leak biometric data, remotely manipulate devices, and deploy backdoors.<\/p>\n

### High-Security Facilities Worldwide at Risk<\/p>\n

High-security facilities worldwide are at risk if they use this vulnerable device, researchers warned. “In addition to replacing the QR code, there is another intriguing physical attack vector. If someone with malicious intent gains access to the device’s database, they can exploit other vulnerabilities to download a legitimate user’s photo, print it, and use it to deceive the device’s camera to gain access to a secured area,” said Georgy Kiguradze, Senior Application Security Specialist at Kaspersky.<\/p>\n

### Biometric Readers Used in Diverse Sectors<\/p>\n

The biometric readers in question are widely used in areas across diverse sectors such as nuclear or chemical plants to offices and hospitals. These devices support face recognition and QR-code authentication, along with the capacity to store thousands of facial templates.<\/p>\n

### Urgency of Patching Vulnerabilities<\/p>\n

All findings were proactively shared with the manufacturer before public disclosure, the researchers mentioned. “All the factors underscore the urgency of patching these vulnerabilities and thoroughly auditing the device’s security settings for those using the devices in corporate areas,” said Kiguradze.<\/p>\n

### Published On<\/p>\n

Published On Jun 12, 2024 at 08:32 AM IST<\/p>\n

### Category Most Read Placement<\/p>\n

### Comment Section<\/p>\n

### Subscription in Article<\/p>\n

\n
\n
\n

Join the community of 2M+ industry professionals<\/h2>\n

Subscribe to our newsletter to get latest insights & analysis.<\/h3>\n<\/p>\n
\n \"Newsletter
\n <\/figure>\n<\/p><\/div><\/div>\n
\n
\n
\n

Download ETCISO App <\/h2>\n