« Volver al listado

CVE-2024-29916

Estado: AplazadaMedia (5.6)—

The dormakaba Saflok system before the November 2023 software update allows an attacker to unlock arbitrary doors at a property via forged keycards, if the attacker has obtained one active or expired keycard for the specific property, aka the "Unsaflok" issue. This occurs, in part, because the key derivation function relies only on a UID. This affects, for example, Saflok MT, and the Confidant, Quantum, RT, and Saffire series.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (5)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Bestpractical — RTAIDormakaba — ConfidantAIDormakaba — QuantumAIDormakaba — SaffireAIDormakaba — Saflok MTAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-29916",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-29916",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-04-06T04:00:40.628490Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.6,
          "attackVector": "PHYSICAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.2,
        "exploitabilityScore": 0.4
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:o:dormakaba:saflok_rt_firmware:*:*:*:*:*:*:*:*"
          ],
          "vendor": "dormakaba",
          "product": "saflok_rt_firmware",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "*"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:o:dormakaba:saflok_mt_firmware:*:*:*:*:*:*:*:*"
          ],
          "vendor": "dormakaba",
          "product": "saflok_mt_firmware",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "*"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:o:dormakaba:quantum_firmware:*:*:*:*:*:*:*:*"
          ],
          "vendor": "dormakaba",
          "product": "quantum_firmware",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "*"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:o:dormakaba:saffire_firmware:*:*:*:*:*:*:*:*"
          ],
          "vendor": "dormakaba",
          "product": "saffire_firmware",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "*"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:o:dormakaba:confidant_firmware:*:*:*:*:*:*:*:*"
          ],
          "vendor": "dormakaba",
          "product": "confidant_firmware",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "*"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-03-21T17:15:09.897",
  "references": [
    {
      "url": "https://news.ycombinator.com/item?id=39779291",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://unsaflok.com",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.wired.com/story/saflok-hotel-lock-unsaflok-hack-technique/",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.youtube.com/watch?v=4cx0RUV7i0s",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://news.ycombinator.com/item?id=39779291",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://unsaflok.com",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.wired.com/story/saflok-hotel-lock-unsaflok-hack-technique/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-407"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The dormakaba Saflok system before the November 2023 software update allows an attacker to unlock arbitrary doors at a property via forged keycards, if the attacker has obtained one active or expired keycard for the specific property, aka the \"Unsaflok\" issue. This occurs, in part, because the key derivation function relies only on a UID. This affects, for example, Saflok MT, and the Confidant, Quantum, RT, and Saffire series."
    },
    {
      "lang": "es",
      "value": "El sistema dormakaba Saflok antes de la actualización de software de noviembre de 2023 permite a un atacante desbloquear puertas arbitrarias en una propiedad mediante tarjetas de acceso falsificadas, si el atacante ha obtenido una tarjeta de acceso activa o vencida para la propiedad específica, también conocido como el problema \"Unsaflok\". Esto ocurre, en parte, porque la función de derivación de claves se basa únicamente en un UID. Esto afecta, por ejemplo, a Saflok MT y a las series Confidant, Quantum, RT y Saffire."
    }
  ],
  "lastModified": "2026-06-17T07:23:21.730",
  "sourceIdentifier": "cve@mitre.org"
}