Vulnerability in Dormakaba Kaba Exos 9300
CVE-2025-59091
Multiple hardcoded credentials have been identified, which are allowed to sign-in to the exos 9300 datapoint server running on port 1004 and 1005. This server is used for relaying status information from and to the Access Managers. This in…
EPSS: 0.008 (51.2th percentile) — read the EPSS interpretation.
Affected products
- Dormakaba Kaba Exos 9300 — versions <4.4.1 manual mitigation needed, >=4.4.1 secured by default
Weakness classification (CWE)
References
- 551230f0-3615-47bd-b7cc-93e92e730bbf (technical-description)
- 551230f0-3615-47bd-b7cc-93e92e730bbf (third-party-advisory)
- 551230f0-3615-47bd-b7cc-93e92e730bbf (vendor-advisory)