Vulnerability in Dormakaba Access Manager 92xx-k5
CVE-2025-59102
The web server of the Access Manager offers a functionality to download a backup of the local database stored on the device. This database contains the whole configuration. This includes encrypted MIFARE keys, card data, user PINs and much…
EPSS: 0.003 (19.5th percentile) — read the EPSS interpretation.
Affected products
- Dormakaba Access Manager 92xx-k5 — versions 92xx-K5: <XAMB 04.06.212
Weakness classification (CWE)
References
- 551230f0-3615-47bd-b7cc-93e92e730bbf (technical-description)
- 551230f0-3615-47bd-b7cc-93e92e730bbf (third-party-advisory)
- 551230f0-3615-47bd-b7cc-93e92e730bbf (vendor-advisory)