CVE-2025-59107

Published: Jan 26, 2026Modified: Jun 17, 2026Deferred

8.5

Vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: 551230f0-3615-47bd-b7cc-93e92e730bbf (Secondary)

Description

Dormakaba provides the software FWServiceTool to update the firmware version of the Access Managers via the network. The firmware in some instances is provided in an encrypted ZIP file. Within this tool, the password used to decrypt the ZIP and extract the firmware is set statically and can be extracted. This password was valid for multiple observed firmware versions.

Related CWEs

CWE-798

Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

References (3)

https://r.sec-consult.com/dkaccess

Source: 551230f0-3615-47bd-b7cc-93e92e730bbf

https://r.sec-consult.com/dormakaba

Source: 551230f0-3615-47bd-b7cc-93e92e730bbf

https://www.dormakabagroup.com/en/security-advisories

Source: 551230f0-3615-47bd-b7cc-93e92e730bbf

Timeline

No history available yet.