Vulnerability in Dormakaba Kaba Exos 9300
CVE-2025-59093
Exos 9300 instances are using a randomly generated database password to connect to the configured MSSQL server. The password is derived from static random values, which are concatenated to the hostname and a random string that can be read…
EPSS: 0.002 (8.6th percentile) — read the EPSS interpretation.
Affected products
- Dormakaba Kaba Exos 9300 — versions All versions, manual mitigation needed!
Weakness classification (CWE)
References
- 551230f0-3615-47bd-b7cc-93e92e730bbf (technical-description)
- 551230f0-3615-47bd-b7cc-93e92e730bbf (third-party-advisory)
- 551230f0-3615-47bd-b7cc-93e92e730bbf (vendor-advisory)