CNNVD-202601-4389 Information

CNNVD ID

CNNVD-202601-4389

CVE-2025-59104

  • CNNVD Published: 2026-01-26

Description (Chinese)

Dormakaba Access Manager是美国Dormakaba公司的一个智能硬件控制器。 Dormakaba Access Manager存在安全漏洞,该漏洞源于物理访问可修改引导加载程序内核命令行,可能导致获取root shell。

Description (English)

Dormakaba Access Manager is a smart hardware controller for Dormakaba in the United States. There is a security loophole in Dormakaba Access Manager, which stems from physical access to modify the nuclear command line within the guided loading process, which may lead to the acquisition of root shell.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Dormakaba

Published

2026-01-26

Last Modified

2026-02-24

References

https://r.sec-consult.com/dormakaba https://r.sec-consult.com/dkaccess https://www.dormakabagroup.com/en/security-advisories https://access.redhat.com/security/cve/cve-2025-59104

Patch

https://www.dormakabagroup.com/en/security-advisories

Share on: