CNNVD-202510-3396 Information

CNNVD ID

CNNVD-202510-3396

CVE-2025-34502

  • CNNVD Published: 2025-10-24

Description (Chinese)

Light & Wonder Deck Mate是英国Light & Wonder公司的一款自动发牌设备。 Light & Wonder Deck Mate存在安全漏洞,该漏洞源于缺少安全启动链验证和运行时完整性验证,可能导致物理访问攻击者修改或替换启动加载程序、内核或文件系统,并在重启时获得持久代码执行。

Description (English)

Light & Wonder Deck Mate is an automated distribution device by Light & Wonder, United Kingdom. Light & Wonder Check Mate has a security loophole, which stems from a lack of security start-up chain validation and operational integrity verification, which may result in physical access to the attacker modifying or replacing the start-up loading program, kernel or file system and obtaining a durable code execution upon restart.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Light & Wonder

Published

2025-10-24

Last Modified

2026-02-24

References

https://www.ioactive.com/wp-content/uploads/2025/05/IOActive-card-shuffler-security.pdf https://www.vulncheck.com/advisories/shuffle-master-deck-mate-2-missing-secure-boot https://access.redhat.com/security/cve/cve-2025-34502

Share on: