This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2025-59090 | BDVDB-2026-312407 Detail

dormakabaKaba exos 9300

Description#

On the exos 9300 server, a SOAP API is reachable on port 8002. This API does not require any authentication prior to sending requests. Therefore, network access to the exos server allows e.g. the creation of arbitrary access log events as well as querying the 2FA PINs associated with the enrolled chip cards.

Impact#

CAPEC-36: Using Unpublished Interfaces or Functionality

Weaknesses#

  • CWE-306 Missing Authentication for Critical Function
  • CWE-1188 Initialization of a Resource with an Insecure Default

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.