CVE-2024-58311
Critical · 9.8CVSS
9.8
EPSS
0.4%
Published
Dec 12, 2025
CISA due date
—
The record
Dormakaba Saflok System 6000 contains a predictable key generation algorithm that allows attackers to derive card access keys from a 32-bit unique identifier. Attackers can exploit the deterministic key generation process by calculating valid access keys using a simple mathematical transformation of the card's unique identifier.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2025-48508 Improper Hardware reset flow logic in the GPU GFX Hardware IP block could allow a… CWE-1245
- CVE-2024-21853 Improper finite state machines (FSMs) in the hardware logic in some 4th and 5th… CWE-1245
- CVE-2024-24968 Improper finite state machines (FSMs) in hardware logic in some Intel(R) Processors may… CWE-1245