Skip to content
OpenAdvisories

Product · dormakaba

Kaba exos 9300

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.6
    CVE-2025-59096

    Weak Default Password in dormakaba Kaba exos 9300

    The default password for the extended admin user mode in the application U9ExosAdmin.exe ("Kaba 9300 Administration") is hard-coded in multiple locations as well as documented in the locally stored user documentation.

    dormakaba Kaba exos 9300
  • Medium 6.8
    CVE-2025-59095

    Hard-coded Key for PIN Encryption in dormakaba Kaba exos 9300

    The program libraries (DLL) and binaries used by exos 9300 contain multiple hard-coded secrets. One notable example is the function "EncryptAndDecrypt" in the library Kaba.EXOS.common.dll. This algorithm uses a simple XOR encryption technique combined with a …

    dormakaba Kaba exos 9300