The dormakaba Saflok system before the November 2023 software update allows an attacker to unlock arbitrary doors at a property via forged keycards, if the attacker has obtained one active or expired keycard for the specific property, aka the "Unsaflok" issue. This occurs, in part, because the key derivation function relies only on a UID. This affects, for example, Saflok MT, and the Confidant, Quantum, RT, and Saffire series.
References
Configurations
No configuration.
History
19 Oct 2024, 23:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
03 Jul 2024, 01:52
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
|
CWE | CWE-407 | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.6 |
21 Mar 2024, 17:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-03-21 17:15
Updated : 2024-10-19 23:15
NVD link : CVE-2024-29916
Mitre link : CVE-2024-29916
CVE.ORG link : CVE-2024-29916
JSON object : View
Products Affected
No product.
CWE
CWE-407
Inefficient Algorithmic Complexity