CVE-2025-59100

The web interface offers a functionality to export the internal SQLite database. After executing the database export, an automatic download is started and the device reboots. After rebooting, the exported database is deleted and cannot be accessed anymore. However, it was noticed that sometimes the device does not reboot and therefore the exported database is not deleted, or the device reboots and the export is not deleted for unknown reasons. The path where the database export is located can be accessed without prior authentication. This leads to the fact that an attacker might be able to get access to the exported database without prior authentication. The database includes sensitive data like passwords, card pins, encrypted Mifare sitekeys and much more.

CVSS

No CVSS.

References

Link	Resource
https://r.sec-consult.com/dkaccess
https://r.sec-consult.com/dormakaba
https://www.dormakabagroup.com/en/security-advisories

Configurations

No configuration.

History

15 Apr 2026, 00:35

Type	Values Removed	Values Added
Summary		(es) La interfaz web ofrece una funcionalidad para exportar la base de datos SQLite interna. Después de ejecutar la exportación de la base de datos, se inicia una descarga automática y el dispositivo se reinicia. Después de reiniciar, la base de datos exportada se elimina y ya no se puede acceder a ella. Sin embargo, se observó que a veces el dispositivo no se reinicia y por lo tanto la base de datos exportada no se elimina, o el dispositivo se reinicia y la exportación no se elimina por razones desconocidas. La ruta donde se encuentra la exportación de la base de datos puede ser accedida sin autenticación previa. Esto lleva al hecho de que un atacante podría ser capaz de obtener acceso a la base de datos exportada sin autenticación previa. La base de datos incluye datos sensibles como contraseñas, PINs de tarjeta, claves de sitio Mifare cifradas y mucho más.

26 Jan 2026, 10:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-01-26 10:16

Updated : 2026-04-15 00:35

NVD link : CVE-2025-59100

Mitre link : CVE-2025-59100

CVE.ORG link : CVE-2025-59100

JSON object : View

Products Affected

No product.

CWE

CWE-285

Improper Authorization

{"id": "CVE-2025-59100", "cveTags": [], "metrics": {"cvssMetricV40": [{"type": "Secondary", "source": "551230f0-3615-47bd-b7cc-93e92e730bbf", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 5.9, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "ACTIVE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "published": "2026-01-26T10:16:07.710", "references": [{"url": "https://r.sec-consult.com/dkaccess", "source": "551230f0-3615-47bd-b7cc-93e92e730bbf"}, {"url": "https://r.sec-consult.com/dormakaba", "source": "551230f0-3615-47bd-b7cc-93e92e730bbf"}, {"url": "https://www.dormakabagroup.com/en/security-advisories", "source": "551230f0-3615-47bd-b7cc-93e92e730bbf"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "551230f0-3615-47bd-b7cc-93e92e730bbf", "description": [{"lang": "en", "value": "CWE-285"}]}], "descriptions": [{"lang": "en", "value": "The web interface offers a functionality to export the internal SQLite database. After executing the database export, an automatic download is started and the device reboots. After rebooting, the exported database is deleted and cannot be accessed anymore. However, it was noticed that sometimes the device does not reboot and therefore the exported database is not deleted, or the device reboots and the export is not deleted for unknown reasons. The path where the database export is located can be accessed without prior authentication. This leads to the fact that an attacker might be able to get access to the exported database without prior authentication. \nThe database includes sensitive data like passwords, card pins, encrypted Mifare sitekeys and much more."}, {"lang": "es", "value": "La interfaz web ofrece una funcionalidad para exportar la base de datos SQLite interna. Despu\u00e9s de ejecutar la exportaci\u00f3n de la base de datos, se inicia una descarga autom\u00e1tica y el dispositivo se reinicia. Despu\u00e9s de reiniciar, la base de datos exportada se elimina y ya no se puede acceder a ella. Sin embargo, se observ\u00f3 que a veces el dispositivo no se reinicia y por lo tanto la base de datos exportada no se elimina, o el dispositivo se reinicia y la exportaci\u00f3n no se elimina por razones desconocidas. La ruta donde se encuentra la exportaci\u00f3n de la base de datos puede ser accedida sin autenticaci\u00f3n previa. Esto lleva al hecho de que un atacante podr\u00eda ser capaz de obtener acceso a la base de datos exportada sin autenticaci\u00f3n previa. La base de datos incluye datos sensibles como contrase\u00f1as, PINs de tarjeta, claves de sitio Mifare cifradas y mucho m\u00e1s."}], "lastModified": "2026-04-15T00:35:42.020", "sourceIdentifier": "551230f0-3615-47bd-b7cc-93e92e730bbf"}