PT-2026-4747 · Dormakaba · Access Managers 9230+5

CVE-2025-59097 · Publicado 2026-01-26 · Atualizado 2026-01-26

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Crítica

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions dormakaba exos 9300 (affected versions not specified)

Description The exos 9300 application, used to configure Access Managers (e.g., 92xx, 9230, and 9290), transmits configuration data via SOAP requests without default authentication or authorization. While authentication via IPsec (for 92xx-K5 devices) and mTLS (for 92xx-K7 devices) is possible, it is not enabled by default and requires additional configuration. This allows an attacker with network access to completely control the environment, including reconfiguring Access Managers, modifying inputs and outputs, opening doors, changing admin passwords, and more. Network access can be gained through insufficient network segmentation or missing LAN firewalls, with some devices identified as directly exposed to the internet.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Enumeração de Fraquezas

CWE-1188

CWE-306

Identificadores relacionados

CVE-2025-59097

Produtos afetados

92Xx-K5

92Xx-K7

Access Managers 9230

Access Managers 9290

Access Managers 92Xx

Dormakaba Exos 9300

Referências · 8

• https://r.sec-consult.com/dormakaba · Nota
• https://twitter.com/0dayPublishing/status/2015823662457249845 · Publicação no Twitter
• https://dormakabagroup.com/en/security-advisories · Aviso do Fabricante
• https://t.me/CVEtracker/43004 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2015733306827083777 · Publicação no Twitter
• https://t.me/CVEtracker/42999 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-59097 · Nota de Segurança
• https://r.sec-consult.com/dkaccess · Nota