CVE-2023-7103 - Vulnerability Details - OpenCVE

Authentication Bypass by Primary Weakness vulnerability in ZKSoftware Biometric Security Solutions UFace 5 allows Authentication Bypass. This issue affects UFace 5: through 12022024.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00021.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Zksoftware	Uface 5

Configuration 1 [-]

cpe:2.3:a:zksoftware:uface_5:*:*:*:*:*:*:*:*

No data.

No data.

References

Link	Providers
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-0173
https://www.usom.gov.tr/bildirim/tr-24-0173

History

Wed, 20 May 2026 09:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Zksoftware Zksoftware uface 5
CPEs		cpe:2.3:a:zksoftware:uface_5::::::::
Vendors & Products		Zksoftware Zksoftware uface 5

Wed, 20 May 2026 09:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 20 May 2026 08:45:00 +0000

Type	Values Removed	Values Added
Description	Authentication Bypass by Primary Weakness vulnerability in ZKSoftware Biometric Security Solutions UFace 5 allows Authentication Bypass.This issue affects UFace 5: through 12022024.	Authentication Bypass by Primary Weakness vulnerability in ZKSoftware Biometric Security Solutions UFace 5 allows Authentication Bypass. This issue affects UFace 5: through 12022024.
References		https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-0173

MITRE

Status: PUBLISHED

Assigner: TR-CERT

Published: 2024-03-05T12:57:32.926Z

Updated: 2026-05-20T07:56:56.506Z

Reserved: 2023-12-25T12:32:23.535Z

Link: CVE-2023-7103

Vulnrichment

Updated: 2024-08-02T08:50:08.293Z

NVD

Status : Modified

Published: 2024-03-05T13:15:06.940

Modified: 2026-05-20T09:16:26.567

Link: CVE-2023-7103

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2023-7103", "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "state": "PUBLISHED", "assignerShortName": "TR-CERT", "dateReserved": "2023-12-25T12:32:23.535Z", "datePublished": "2024-03-05T12:57:32.926Z", "dateUpdated": "2026-05-20T07:56:56.506Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "shortName": "TR-CERT", "dateUpdated": "2026-05-20T07:56:56.506Z"}, "title": "Authentication Bypass in ZKSoftware's UFace 5", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-305", "description": "CWE-305 Authentication Bypass by Primary Weakness", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-115", "descriptions": [{"lang": "en", "value": "CAPEC-115 Authentication Bypass"}]}], "affected": [{"vendor": "ZKSoftware Biometric Security Solutions", "product": "UFace 5", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "12022024", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Authentication Bypass by Primary Weakness vulnerability in ZKSoftware Biometric Security Solutions UFace 5 allows Authentication Bypass.\n\nThis issue affects UFace 5: through 12022024.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Authentication Bypass by Primary Weakness vulnerability in ZKSoftware Biometric Security Solutions UFace 5 allows Authentication Bypass.<p>This issue affects UFace 5: through 12022024.</p>"}]}], "references": [{"url": "https://www.usom.gov.tr/bildirim/tr-24-0173", "tags": ["government-resource", "broken-link"]}, {"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-0173", "tags": ["government-resource"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "CRITICAL", "baseScore": 9.8, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}], "credits": [{"lang": "en", "value": "Efe \u00d6zel", "user": "00000000-0000-4000-9000-000000000000", "type": "finder"}, {"lang": "en", "value": "\u00d6mer Y\u0131lmaz", "user": "00000000-0000-4000-9000-000000000000", "type": "analyst"}, {"lang": "en", "value": "Cemil Sefa \u00d6zcan", "user": "00000000-0000-4000-9000-000000000000", "type": "analyst"}, {"lang": "en", "value": "fordefence.com", "user": "00000000-0000-4000-9000-000000000000", "type": "sponsor"}], "source": {"defect": ["TR-24-0173"], "advisory": "TR-24-0173", "discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T08:50:08.293Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.usom.gov.tr/bildirim/tr-24-0173", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-08-02T19:42:29.047019Z", "id": "CVE-2023-7103", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-02T19:42:43.873Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.usom.gov.tr/bildirim/tr-24-0173", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T08:50:08.293Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-7103", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-08-02T19:42:29.047019Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-02T19:42:37.584Z"}}], "cna": {"title": "Authentication Bypass in ZKSoftware's UFace 5", "source": {"defect": ["TR-24-0173"], "advisory": "TR-24-0173", "discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Efe \u00d6zel"}, {"lang": "en", "type": "analyst", "user": "00000000-0000-4000-9000-000000000000", "value": "\u00d6mer Y\u0131lmaz"}, {"lang": "en", "type": "analyst", "user": "00000000-0000-4000-9000-000000000000", "value": "Cemil Sefa \u00d6zcan"}, {"lang": "en", "type": "sponsor", "user": "00000000-0000-4000-9000-000000000000", "value": "fordefence.com"}], "impacts": [{"capecId": "CAPEC-115", "descriptions": [{"lang": "en", "value": "CAPEC-115 Authentication Bypass"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "ZKSoftware Biometric Security Solutions", "product": "UFace 5", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "12022024"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.usom.gov.tr/bildirim/tr-24-0173", "tags": ["government-resource", "broken-link"]}, {"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-0173", "tags": ["government-resource"]}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "Authentication Bypass by Primary Weakness vulnerability in ZKSoftware Biometric Security Solutions UFace 5 allows Authentication Bypass.\n\nThis issue affects UFace 5: through 12022024.", "supportingMedia": [{"type": "text/html", "value": "Authentication Bypass by Primary Weakness vulnerability in ZKSoftware Biometric Security Solutions UFace 5 allows Authentication Bypass.<p>This issue affects UFace 5: through 12022024.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-305", "description": "CWE-305 Authentication Bypass by Primary Weakness"}]}], "providerMetadata": {"orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "shortName": "TR-CERT", "dateUpdated": "2026-05-20T07:56:56.506Z"}}}, "cveMetadata": {"cveId": "CVE-2023-7103", "state": "PUBLISHED", "dateUpdated": "2026-05-20T07:56:56.506Z", "dateReserved": "2023-12-25T12:32:23.535Z", "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "datePublished": "2024-03-05T12:57:32.926Z", "assignerShortName": "TR-CERT"}, "dataVersion": "5.2"}