CVE-2024-58311
Critical
Description
Dormakaba Saflok System 6000 contains a predictable key generation algorithm that allows attackers to derive card access keys from a 32-bit unique identifier. Attackers can exploit the deterministic key generation process by calculating valid access keys using a simple mathematical transformation of the card's unique identifier.
SeverityCritical
CVSS9.8
Exploit probability—
ProductDormakaba Saflok System 6000
PublishedDec 12, 2025
First seenDec 12, 2025
Weakness typeCWE-1245CWE-1245
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dormakaba Dormakaba Saflok System 6000 | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.