Deck Mate 2 vulnerabilities

3 known vulnerabilities in Deck Mate 2 from Light & Wonder, Inc. / SHFL Entertainment, Inc. / Shuffle Master. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.0 High severity

  Deck Mate 2: Use of Hard-coded Credentials

  CVE-2025-34501Nov 3, 2025Light & Wonder, Inc. / SHFL Entertainment, Inc. / Shuffle Master

  Deck Mate 2 is distributed with static, hard-coded credentials for the root shell and web user interface, while multiple management services (SSH, HTTP, Telnet, SMB, X11) are enabled by default. If an attacker can reach these interfaces - most often through lo

• 7.0 High severity

  Deck Mate 2: Missing Immutable Root of Trust in Hardware

  CVE-2025-34502Oct 24, 2025Light & Wonder, Inc. / SHFL Entertainment, Inc. / Shuffle Master

  Deck Mate 2 lacks a verified secure-boot chain and runtime integrity validation for its controller and display modules. Without cryptographic boot verification, an attacker with physical access can modify or replace the bootloader, kernel, or filesystem and ga

• 7.0 High severity

  Deck Mate 2: Use of Hard-coded Cryptographic Key

  CVE-2025-34500Oct 24, 2025Light & Wonder, Inc. / SHFL Entertainment, Inc. / Shuffle Master

  Deck Mate 2's firmware update mechanism accepts packages without cryptographic signature verification, encrypts them with a single hard-coded AES key shared across devices, and uses a truncated HMAC for integrity validation. Attackers with access to the update