Search
Find a vulnerability
Search criteria
2 vulnerabilities found for quantum_firmware by dormakaba
CVE-2024-29916 (GCVE-0-2024-29916)
Vulnerability from nvd – Published: 2024-03-21 00:00 – Updated: 2024-10-19 22:56
VLAI
EPSS
VEX
Summary
The dormakaba Saflok system before the November 2023 software update allows an attacker to unlock arbitrary doors at a property via forged keycards, if the attacker has obtained one active or expired keycard for the specific property, aka the "Unsaflok" issue. This occurs, in part, because the key derivation function relies only on a UID. This affects, for example, Saflok MT, and the Confidant, Quantum, RT, and Saffire series.
Severity
5.6 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-04-06 04:00 UTC
CWE
- n/a
- CWE-407 - Inefficient Algorithmic Complexity
Assigner
References
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| dormakaba | saflok_rt_firmware |
Affected:
0 , ≤ *
(custom)
cpe:2.3:o:dormakaba:saflok_rt_firmware:*:*:*:*:*:*:*:* |
|
| dormakaba | saflok_mt_firmware |
Affected:
0 , ≤ *
(custom)
cpe:2.3:o:dormakaba:saflok_mt_firmware:*:*:*:*:*:*:*:* |
|
| dormakaba | quantum_firmware |
Affected:
0 , ≤ *
(custom)
cpe:2.3:o:dormakaba:quantum_firmware:*:*:*:*:*:*:*:* |
|
| dormakaba | saffire_firmware |
Affected:
0 , ≤ *
(custom)
cpe:2.3:o:dormakaba:saffire_firmware:*:*:*:*:*:*:*:* |
|
| dormakaba | confidant_firmware |
Affected:
0 , ≤ *
(custom)
cpe:2.3:o:dormakaba:confidant_firmware:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:o:dormakaba:saflok_rt_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "saflok_rt_firmware",
"vendor": "dormakaba",
"versions": [
{
"lessThanOrEqual": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dormakaba:saflok_mt_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "saflok_mt_firmware",
"vendor": "dormakaba",
"versions": [
{
"lessThanOrEqual": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dormakaba:quantum_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "quantum_firmware",
"vendor": "dormakaba",
"versions": [
{
"lessThanOrEqual": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dormakaba:saffire_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "saffire_firmware",
"vendor": "dormakaba",
"versions": [
{
"lessThanOrEqual": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dormakaba:confidant_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "confidant_firmware",
"vendor": "dormakaba",
"versions": [
{
"lessThanOrEqual": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "PHYSICAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-29916",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-04-06T04:00:40.628490Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-407",
"description": "CWE-407 Inefficient Algorithmic Complexity",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-06-19T22:49:13.822Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T01:17:58.598Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://unsaflok.com"
},
{
"tags": [
"x_transferred"
],
"url": "https://news.ycombinator.com/item?id=39779291"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.wired.com/story/saflok-hotel-lock-unsaflok-hack-technique/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The dormakaba Saflok system before the November 2023 software update allows an attacker to unlock arbitrary doors at a property via forged keycards, if the attacker has obtained one active or expired keycard for the specific property, aka the \"Unsaflok\" issue. This occurs, in part, because the key derivation function relies only on a UID. This affects, for example, Saflok MT, and the Confidant, Quantum, RT, and Saffire series."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-10-19T22:56:01.256Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://unsaflok.com"
},
{
"url": "https://news.ycombinator.com/item?id=39779291"
},
{
"url": "https://www.wired.com/story/saflok-hotel-lock-unsaflok-hack-technique/"
},
{
"url": "https://www.youtube.com/watch?v=4cx0RUV7i0s"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2024-29916",
"datePublished": "2024-03-21T00:00:00.000Z",
"dateReserved": "2024-03-21T00:00:00.000Z",
"dateUpdated": "2024-10-19T22:56:01.256Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-29916 (GCVE-0-2024-29916)
Vulnerability from cvelistv5 – Published: 2024-03-21 00:00 – Updated: 2024-10-19 22:56
VLAI
EPSS
VEX
Summary
The dormakaba Saflok system before the November 2023 software update allows an attacker to unlock arbitrary doors at a property via forged keycards, if the attacker has obtained one active or expired keycard for the specific property, aka the "Unsaflok" issue. This occurs, in part, because the key derivation function relies only on a UID. This affects, for example, Saflok MT, and the Confidant, Quantum, RT, and Saffire series.
Severity
5.6 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-04-06 04:00 UTC
CWE
- n/a
- CWE-407 - Inefficient Algorithmic Complexity
Assigner
References
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| dormakaba | saflok_rt_firmware |
Affected:
0 , ≤ *
(custom)
cpe:2.3:o:dormakaba:saflok_rt_firmware:*:*:*:*:*:*:*:* |
|
| dormakaba | saflok_mt_firmware |
Affected:
0 , ≤ *
(custom)
cpe:2.3:o:dormakaba:saflok_mt_firmware:*:*:*:*:*:*:*:* |
|
| dormakaba | quantum_firmware |
Affected:
0 , ≤ *
(custom)
cpe:2.3:o:dormakaba:quantum_firmware:*:*:*:*:*:*:*:* |
|
| dormakaba | saffire_firmware |
Affected:
0 , ≤ *
(custom)
cpe:2.3:o:dormakaba:saffire_firmware:*:*:*:*:*:*:*:* |
|
| dormakaba | confidant_firmware |
Affected:
0 , ≤ *
(custom)
cpe:2.3:o:dormakaba:confidant_firmware:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:o:dormakaba:saflok_rt_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "saflok_rt_firmware",
"vendor": "dormakaba",
"versions": [
{
"lessThanOrEqual": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dormakaba:saflok_mt_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "saflok_mt_firmware",
"vendor": "dormakaba",
"versions": [
{
"lessThanOrEqual": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dormakaba:quantum_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "quantum_firmware",
"vendor": "dormakaba",
"versions": [
{
"lessThanOrEqual": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dormakaba:saffire_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "saffire_firmware",
"vendor": "dormakaba",
"versions": [
{
"lessThanOrEqual": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:dormakaba:confidant_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "confidant_firmware",
"vendor": "dormakaba",
"versions": [
{
"lessThanOrEqual": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "PHYSICAL",
"availabilityImpact": "NONE",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-29916",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-04-06T04:00:40.628490Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-407",
"description": "CWE-407 Inefficient Algorithmic Complexity",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-06-19T22:49:13.822Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T01:17:58.598Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://unsaflok.com"
},
{
"tags": [
"x_transferred"
],
"url": "https://news.ycombinator.com/item?id=39779291"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.wired.com/story/saflok-hotel-lock-unsaflok-hack-technique/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The dormakaba Saflok system before the November 2023 software update allows an attacker to unlock arbitrary doors at a property via forged keycards, if the attacker has obtained one active or expired keycard for the specific property, aka the \"Unsaflok\" issue. This occurs, in part, because the key derivation function relies only on a UID. This affects, for example, Saflok MT, and the Confidant, Quantum, RT, and Saffire series."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-10-19T22:56:01.256Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://unsaflok.com"
},
{
"url": "https://news.ycombinator.com/item?id=39779291"
},
{
"url": "https://www.wired.com/story/saflok-hotel-lock-unsaflok-hack-technique/"
},
{
"url": "https://www.youtube.com/watch?v=4cx0RUV7i0s"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2024-29916",
"datePublished": "2024-03-21T00:00:00.000Z",
"dateReserved": "2024-03-21T00:00:00.000Z",
"dateUpdated": "2024-10-19T22:56:01.256Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}