Vulnerability in Dormakaba Access Manager 92xx-k5
CVE-2025-59101
Instead of typical session tokens or cookies, it is verified on a per-request basis if the originating IP address has once successfully logged in. As soon as an authentication request from a certain source IP is successful, the IP address…
EPSS: 0.006 (43.6th percentile) — read the EPSS interpretation.
Affected products
- Dormakaba Access Manager 92xx-k5 — versions 92xx-K5: <XAMB 04.06.212
- Dormakaba Access Manager 92xx-k7 — versions 92xx-K7: <BAME 04.07.268
Weakness classification (CWE)
References
- 551230f0-3615-47bd-b7cc-93e92e730bbf (technical-description)
- 551230f0-3615-47bd-b7cc-93e92e730bbf (third-party-advisory)
- 551230f0-3615-47bd-b7cc-93e92e730bbf (vendor-advisory)