A vulnerability was found in ZkTeco ZAM170-NF 1.8.25-7354-Ver1.0.0. It has been classified as critical. Affected is an unknown function. The manipulation leads to sql injection.

This vulnerability is traded as CVE-2023-3938. Local access is required to approach this attack. There is no exploit available.