CVE-2025-59107

N/A

Descripcion

Dormakaba provides the software FWServiceTool to update the firmware version of the Access Managers via the network. The firmware in some instances is provided in an encrypted ZIP file. Within this tool, the password used to decrypt the ZIP and extract the firmware is set statically and can be extracted. This password was valid for multiple observed firmware versions.

Detalles CVE

Puntuacion CVSS v3.1N/A

Publicado1/26/2026

Ultima modificacion1/26/2026

Fuentenvd

Avistamientos honeypot0

Debilidades (CWE)

CWE-798

Referencias

https://r.sec-consult.com/dkaccess(551230f0-3615-47bd-b7cc-93e92e730bbf)

https://r.sec-consult.com/dormakaba(551230f0-3615-47bd-b7cc-93e92e730bbf)

https://www.dormakabagroup.com/en/security-advisories(551230f0-3615-47bd-b7cc-93e92e730bbf)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.