Access Manager 92xx Vulnerability in Dormakaba's K7 Hardware Revision

CVE-2025-59103

What is CVE-2025-59103?

The Access Manager 92xx, in its K7 hardware revision, runs on a Linux platform, unlike previous versions that operated on Windows CE. A significant security flaw has been identified where an SSH service is exposed on port 22, allowing potential unauthorized access. Two user accounts exist within the device, both featuring weak, hardcoded passwords that are susceptible to guesswork. Notably, although one of the user passwords can be randomized after initial deployment, this only occurs if the configured date is set prior to 2022, leaving devices vulnerable if the clock is never set, the battery is replaced, or if the device undergoes a factory reset without a subsequent time setting.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References