Unsecured Connection

[iamB0rgy]

This isn't a bug but a security issue. As long as I know the IP of the device, I can do everything like, wipe out the date, pull the data, restart the device, etc. Or is there any way to setup a password in the device? I am using SpeedFace-H5L.

In this below code, I can read without the password.

from zk import ZK

zk = ZK('192.168.1.2', port=4370, verbose=True)
conn = None

try:
conn = zk.connect()
conn.disable_device()

attendance = conn.get_attendance()
if attendance:
    for record in attendance:
        print(f"User: {record.user_id}, Timestamp: {record.timestamp}, Status: {record.status}")
else:
    print("No attendance records found.")

conn.enable_device()  

except Exception as e:
print(f"Error: {e}")
finally:
if conn:
conn.disconnect()

[shadow046]

what i do is i change the port number of the device.

[shadow046]

O i check it.. The comm key is the password

[tuyendv-it]

We use passwords, so this is not a "security issue". It's your negligence in not setting a password.

[shadow046]

We use passwords, so this is not a "security issue". It's your negligence in not setting a password.

yes.. we can set a password. maybe he just didn't saw the comm key