CVE-2025-59094: high-severity vulnerability in dormakaba Kaba exos 9300
Local Privilege Escalation in dormakaba Kaba exos 9300 System management
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.4epss 0.2%
A local privilege escalation vulnerability has been identified in the Kaba exos 9300 System management application (d9sysdef.exe). Within this application it is possible to specify an arbitrary executable as well as the weekday and start time, when the specified executable should be run with SYSTEM privileges.
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
dormakaba · Kaba exos 9300Related CVEs — dormakaba Kaba exos 9300
In the same product, most dangerous first.
CVE-2025-59090CRITICALUnauthenticated SOAP API in dormakaba Kaba exos 9300EPSS 1.2%CVE-2025-59092HIGHUnauthenticated RPC Service in dormakaba Kaba exos 9300EPSS 0.9%CVE-2025-59091CRITICALHardcoded Legacy Accounts Allowing Control Over Access Managers in dormakaba Kaba exos 9300EPSS 0.9%CVE-2025-59093HIGHInsecure Password Derivation Function for Database Administrator in dormakaba Kaba exos 9300EPSS 0.2%CVE-2025-59096MEDIUMWeak Default Password in dormakaba Kaba exos 9300EPSS 0.2%CVE-2025-59095MEDIUMHard-coded Key for PIN Encryption in dormakaba Kaba exos 9300EPSS 0.1%