Access Manager 92xx-k5 vulnerabilities
7 known vulnerabilities in Access Manager 92xx-k5 from Dormakaba. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.5 High severity
Access Manager 92xx-k5: Use of Hard-coded Credentials
Dormakaba provides the software FWServiceTool to update the firmware version of the Access Managers via the network. The firmware in some instances is provided in an encrypted ZIP file. Within this tool, the password used to decrypt the ZIP and extract the fir
- 7.0 High severity
Access Manager 92xx-k5: Cleartext Storage of Sensitive Information
With physical access to the device and enough time an attacker can desolder the flash memory, modify it and then reinstall it because of missing encryption. Thus, essential files, such as "/etc/passwd", as well as stored certificates, cryptographic keys, store
- 9.2 Critical severity
Access Manager 92xx-k5: Use of Weak Credentials
The Access Manager 92xx in hardware revision K7 is based on Linux instead of Windows CE embedded in older hardware revisions. In this new hardware revision it was noticed that an SSH service is exposed on port 22. By analyzing the firmware of the devices, it w
- 7.7 High severity
Access Manager 92xx-k5: Reliance on IP Address for Authentication
Instead of typical session tokens or cookies, it is verified on a per-request basis if the originating IP address has once successfully logged in. As soon as an authentication request from a certain source IP is successful, the IP address is handled as authent
- 8.8 High severity
Access Manager 92xx-k5: Path Traversal: '.../...//'
The Access Manager is using the open source web server CompactWebServer written in C#. This web server is affected by a path traversal vulnerability, which allows an attacker to directly access files via simple GET requests without prior authentication. Hence,
- 8.7 High severity
Access Manager 92xx-k5: Exposure of Sensitive System Information to an Unauthorized Control Sphere
The Access Manager is offering a trace functionality to debug errors and issues with the device. The trace functionality is implemented as a simple TCP socket. A tool called TraceClient.exe, provided by dormakaba via the Access Manager web interface, is used t
- 9.3 Critical severity
Access Manager 92xx-k5: Missing Authentication for Critical Functionality
The exos 9300 application can be used to configure Access Managers (e.g. 92xx, 9230 and 9290). The configuration is done in a graphical user interface on the dormakaba exos server. As soon as the save button is clicked in exos 9300, the whole configuration is