Security Flaw in Dormakaba K7 and K5 Models Exposes Sensitive Data

CVE-2025-59105

What is CVE-2025-59105?

This vulnerability allows an attacker with physical access to Dormakaba's K7 and K5 models to manipulate critical components due to absent encryption measures. In the K7 model, the attacker can tamper with flash memory, leading to unauthorized modifications of sensitive files, including user credentials and cryptographic keys, thereby granting SSH root access. In the K5 model, the plain-text password for the Access Manager can be extracted from the SQLite database, elevating the risk of unauthorized access to security controls.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References