CVE-2025-59094: fallo de gravedad alta en dormakaba Kaba exos 9300
Local Privilege Escalation in dormakaba Kaba exos 9300 System management
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 8.4epss 0.2%
A local privilege escalation vulnerability has been identified in the Kaba exos 9300 System management application (d9sysdef.exe). Within this application it is possible to specify an arbitrary executable as well as the weekday and start time, when the specified executable should be run with SYSTEM privileges.
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
dormakaba · Kaba exos 9300CVEs relacionadas — dormakaba Kaba exos 9300
En el mismo producto, de las más peligrosas a las menos.
CVE-2025-59090CRITICALUnauthenticated SOAP API in dormakaba Kaba exos 9300EPSS 1.2%CVE-2025-59092HIGHUnauthenticated RPC Service in dormakaba Kaba exos 9300EPSS 0.9%CVE-2025-59091CRITICALHardcoded Legacy Accounts Allowing Control Over Access Managers in dormakaba Kaba exos 9300EPSS 0.9%CVE-2025-59093HIGHInsecure Password Derivation Function for Database Administrator in dormakaba Kaba exos 9300EPSS 0.2%CVE-2025-59096MEDIUMWeak Default Password in dormakaba Kaba exos 9300EPSS 0.2%CVE-2025-59095MEDIUMHard-coded Key for PIN Encryption in dormakaba Kaba exos 9300EPSS 0.1%