← Database

CVE-2024-58311

CRITICAL CVSS: 9.8 Published: 2025-12-12 Modified: 2026-06-17

Description

Dormakaba Saflok System 6000 contains a predictable key generation algorithm that allows attackers to derive card access keys from a 32-bit unique identifier. Attackers can exploit the deterministic key generation process by calculating valid access keys using a simple mathematical transformation of the card's unique identifier.

Affected Platforms

Unknown

Weakness Type

CWE-1245

References