DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
dormakaba Access Manager: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2026-01-25
Ein Angreifer kann mehrere Schwachstellen in dormakaba Access Manager ausnutzen, um seine Privilegien zu erhöhen, um Informationen offenzulegen, um einen Denial of Service Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.
01
beschreibt (12)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-59108US | —OT erhöht | — | ||
By default, the password for the Access Manager's web interface, is set to 'admin'. In the tested version changing the password was not enforced. | ||||
| CVE-2025-59107US | —OT erhöht | — | ||
Dormakaba provides the software FWServiceTool to update the firmware version of the Access Managers via the network. The firmware in some instances is provided in an encrypted ZIP… | ||||
| CVE-2025-59106US | — | — | ||
The binary serving the web server and executing basically all actions launched from the Web UI is running with root privileges. This is against the least privilege principle. If an… | ||||
| CVE-2025-59105US | —OT erhöht | — | ||
With physical access to the device and enough time an attacker can desolder the flash memory, modify it and then reinstall it because of missing encryption. Thus, essential files,… | ||||
| CVE-2025-59104US | — | — | ||
With physical access to the device and enough time an attacker is able to solder test leads to the debug footprint (or use the 6-Pin tag-connect cable). Thus, the attacker gains ac… | ||||
| CVE-2025-59103US | — | — | ||
The Access Manager 92xx in hardware revision K7 is based on Linux instead of Windows CE embedded in older hardware revisions. In this new hardware revision it was noticed that an S… | ||||
| CVE-2025-59102US | —OT erhöht | — | ||
The web server of the Access Manager offers a functionality to download a backup of the local database stored on the device. This database contains the whole configuration. This in… | ||||
| CVE-2025-59101US | — | — | ||
Instead of typical session tokens or cookies, it is verified on a per-request basis if the originating IP address has once successfully logged in. As soon as an authentication requ… | ||||
| CVE-2025-59100US | — | — | ||
The web interface offers a functionality to export the internal SQLite database. After executing the database export, an automatic download is started and the device reboots. After… | ||||
| CVE-2025-59099US | — | — | ||
The Access Manager is using the open source web server CompactWebServer written in C#. This web server is affected by a path traversal vulnerability, which allows an attacker to di… | ||||
| CVE-2025-59098US | — | — | ||
The Access Manager is offering a trace functionality to debug errors and issues with the device. The trace functionality is implemented as a simple TCP socket. A tool called TraceC… | ||||
| CVE-2025-59097US | —OT erhöht | — | ||
The exos 9300 application can be used to configure Access Managers (e.g. 92xx, 9230 and 9290). The configuration is done in a graphical user interface on the dormakaba exos server.… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan