An undocumented export port is available on certain ZKTeco CCTV camera models that can be accessed without any authentication. The port reveals sensitive data such as open services and the camera’s account credentials, thereby allowing an attacker to compromise the confidentiality of the device and potentially gain control of the camera. The weakness is an improper authentication flaw (CWE‑288).

The vulnerability affects ZKTeco SSC335‑GC2063‑Face‑0b77 Solution Cameras. Firmware versions prior to V5.0.1.2.20260421 are vulnerable; the vendor has released a patch in that firmware release. No other affected versions are documented.

The CVSS score of 9.1 classifies this issue as critical, indicating a high likelihood that an attacker could exploit the unauthenticated port. The EPSS score is not available, but the lack of required authentication makes exploitation straightforward from any network that can reach the camera. The vulnerability is not yet listed in the CISA KEV catalog, so no known exploits have been publicly identified yet, but the simple access path suggests a high potential for misuse.