{"vulnerability": "cve-2022-42953", "sightings": [{"uuid": "b9e486fb-b3b9-412e-826d-6879783cabb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-42953", "type": "seen", "source": "https://t.me/cibsecurity/55297", "content": "\u203c CVE-2022-42953 \u203c\n\nCertain ZKTeco products (ZEM500-510-560-760, ZEM600-800, ZEM720, ZMM) allow access to sensitive information via direct requests for the form/DataApp?style=1 and form/DataApp?style=0 URLs. The affected versions may be before 8.88 (ZEM500-510-560-760, ZEM600-800, ZEM720) and 15.00 (ZMM200-220-210). The fixed versions are firmware version 8.88 (ZEM500-510-560-760, ZEM600-800, ZEM720) and firmware version 15.00 (ZMM200-220-210).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-25T07:39:50.000000Z"}, {"uuid": "98c84ceb-925e-4af8-a6f0-ceffcca145a3", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-42953", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/66c02f3d-730e-416d-bf0d-3067da7ce111", "content": "", "creation_timestamp": "2026-07-01T07:18:00.268910Z"}]}