Vulnerability in Dormakaba Access Manager 92xx-k5
CVE-2025-59098
The Access Manager is offering a trace functionality to debug errors and issues with the device. The trace functionality is implemented as a simple TCP socket. A tool called TraceClient.exe, provided by dormakaba via the Access Manager web…
EPSS: 0.001 (21.0th percentile) — read the EPSS interpretation.
Affected products
- Dormakaba Access Manager 92xx-k5 — versions 92xx-K5: <XAMB 04.06.212
- Dormakaba Access Manager 92xx-k7 — versions 92xx-K7: <BAME 05.02.156
Weakness classification (CWE)
References
- r.sec-consult.com/dormakaba (technical-description)
- r.sec-consult.com/dkaccess (third-party-advisory)
- www.dormakabagroup.com/en/security-advisories (vendor-advisory)