Vulnerability in Dormakaba Kaba Exos 9300
CVE-2025-59095
The program libraries (DLL) and binaries used by exos 9300 contain multiple hard-coded secrets. One notable example is the function "EncryptAndDecrypt" in the library Kaba.EXOS.common.dll. This algorithm uses a simple XOR encryption techni…
EPSS: 0.001 (1.2th percentile) — read the EPSS interpretation.
Affected products
- Dormakaba Kaba Exos 9300 — versions <4.3.3
Weakness classification (CWE)
References
- 551230f0-3615-47bd-b7cc-93e92e730bbf (technical-description)
- 551230f0-3615-47bd-b7cc-93e92e730bbf (third-party-advisory)
- 551230f0-3615-47bd-b7cc-93e92e730bbf (vendor-advisory)