CVE-2025-54464 - CVE House
Back to Database
Status published High CVE-2025-54464

Cleartext Storage Vulnerability in ZKTeco WL20

Vulnerability Description

This vulnerability exists in ZKTeco WL20 due to storage of admin and user credentials without encryption in the device firmware. An attacker with physical access could exploit this vulnerability by extracting the firmware and reverse engineer the binary data to access the unencrypted credentials stored in the firmware of targeted device.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-54464

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • This vulnerability is reported by Shravan Singh from Kavach IoT Security.

References

More from ZKTeco Co

View All →
CVE-2025-55280
Information Disclosure Vulnerability in ZKTeco WL20
Medium 5.2
CVE-2025-55279
Hard-coded Private Key Vulnerability in ZKTeco WL20
Medium 6.9
CVE-2025-54465
Hard-coded Credentials Vulnerability in ZKTeco WL20
Medium 6.8

Affected Vendor

Affected Software

WL20 Biometric Attendance System
Vulnerable Versions:
<=ZLM31-FXO1-3.1.8

Timeline

Official Publish: August 13th, 2025
Last Modified: August 13th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-312

MITRE ATT&CK TTPs

T1005 Data from Local System
Collection
T1552 Unsecured Credentials
Credential Access
T1530 Data from Cloud Storage
Collection
T1078 Valid Accounts
Persistence
T1041 Exfiltration Over C2 Channel
Exfiltration