Advisories · Technology
dormakaba Access Manager 92xx-k5.
Every CVE that names dormakaba Access Manager 92xx-k5 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.2 CriticalCritical · CVSS 9+
Weak Default Passwords in dormakaba access manager
- dormakaba Access Manager 92xx-k5
- dormakaba Access Manager 92xx-k7
- CWE-1392
- CVSS 8.5 High
Static Firmware Encryption Password in dormakaba access manager
- dormakaba Access Manager 92xx-k5
- Hard-coded credentials
- CVSS 7.0 High
Unencrypted Flash Storage in dormakaba access manager
- dormakaba Access Manager 92xx-k5
- dormakaba Access Manager 92xx-k7
- Information disclosure
- CVSS 9.2 CriticalCritical · CVSS 9+
Weak Default Passwords for SSH Access in dormakaba access manager
- dormakaba Access Manager 92xx-k5
- Hard-coded credentials
- CVSS 6.9 Medium
Secrets Stored in Plaintext in Database in dormakaba access manager
- dormakaba Access Manager 92xx-k5
- Information disclosure
- CVSS 7.7 High
Insufficient Session Management in dormakaba access manager
- dormakaba Access Manager 92xx-k5
- dormakaba Access Manager 92xx-k7
- CWE-291
- CVSS 5.9 Medium
Unauthenticated Access to the SQLite Database in dormakaba access manager
- dormakaba Access Manager 92xx-k5
- Broken access control
- CVSS 8.8 High
Unauthenticated Path Traversal in dormakaba access manager
- dormakaba Access Manager 92xx-k5
- dormakaba Access Manager 92xx-k7
- Path traversal
- CVSS 8.7 High
Trace Functionality Leaking Sensitive Data in dormakaba access manager
- dormakaba Access Manager 92xx-k5
- dormakaba Access Manager 92xx-k7
- Information disclosure
- CVSS 9.3 CriticalCritical · CVSS 9+
Unauthenticated SOAP API in dormakaba access manager
- dormakaba Access Manager 92xx-k5
- dormakaba Access Manager 92xx-k7
- Authentication bypass
- CWE-1188