Kaba exos 9300 vulnerabilities
5 known vulnerabilities in Kaba exos 9300 from Dormakaba. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.4 High severity
Kaba exos 9300: Improper Privilege Management
A local privilege escalation vulnerability has been identified in the Kaba exos 9300 System management application (d9sysdef.exe). Within this application it is possible to specify an arbitrary executable as well as the weekday and start time, when the specifi
- 8.5 High severity
Kaba exos 9300: Reliance on Security Through Obscurity
Exos 9300 instances are using a randomly generated database password to connect to the configured MSSQL server. The password is derived from static random values, which are concatenated to the hostname and a random string that can be read by every user from th
- 8.7 High severity
Kaba exos 9300: Use of Hard-coded Credentials
An RPC service, which is part of exos 9300, is reachable on port 4000, run by the process FSMobilePhoneInterface.exe. This service is used for interprocess communication between services and the Kaba exos 9300 GUI, containing status information about the Acces
- 9.3 Critical severity
Kaba exos 9300: Use of Hard-coded Credentials
Multiple hardcoded credentials have been identified, which are allowed to sign-in to the exos 9300 datapoint server running on port 1004 and 1005. This server is used for relaying status information from and to the Access Managers. This information, among othe
- 9.3 Critical severity
Kaba exos 9300: Missing Authentication for Critical Functionality
On the exos 9300 server, a SOAP API is reachable on port 8002. This API does not require any authentication prior to sending requests. Therefore, network access to the exos server allows e.g. the creation of arbitrary access log events as well as querying the