vendor:
Saflok
by:
a51199deefa2c2520cea24f746d899ce
6.1
CVSS
HIGH
Key Derivation Function Vulnerability
798
CWE
Product Name: Saflok
Affected Version From: System 6000
Affected Version To: System 6000
Patch Exists: NO
Related CWE:
CPE: a:dormakaba:saflok:6000
Platforms Tested: Dormakaba Saflok cards
2023
Saflok KDF Vulnerability Exploit
The Saflok KDF (Key Derivation Function) exploit allows an attacker to derive encryption keys from a 32-bit UID value, resulting in unauthorized access to the system. This vulnerability does not have a CVE assigned yet.
Mitigation:
To mitigate this vulnerability, ensure strong access controls, implement multi-factor authentication, and regularly update the system to patch security flaws.
