CVE-2024-58311

Katalog CVE

CVSS 9.8 · Critical EPSS 0,42%

Kerentanan Improper Finite State Machines (FSMs) in Hardware Logic. Skor CVSS 3.1 9.8 (Critical) menurut vulncheck.com.

Deskripsi (NVD)

Dormakaba Saflok System 6000 contains a predictable key generation algorithm that allows attackers to derive card access keys from a 32-bit unique identifier. Attackers can exploit the deterministic key generation process by calculating valid access keys using a simple mathematical transformation of the card's unique identifier.

Rincian

Terbit di NVD

12 Desember 2025

Terakhir diubah

17 Juni 2026

Status NVD

Deferred

CVSS 3.1

9.8 (Critical), sumber vulncheck.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1245: Improper Finite State Machines (FSMs) in Hardware Logic

EPSS (30 hari)

0,42% peluang dieksploitasi; lebih tinggi dari 34,3% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://www.dormakaba.com/
• https://www.exploit-db.com/exploits/51832
• https://www.vulncheck.com/advisories/dormakaba-saflok-system-key-generation-cryptographic-weakness