CVE-2024-45861: Kastle Access Control System Firmware

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Kastle Systems firmware prior to May 1, 2024, contained a hard-coded credential, which if accessed may allow an attacker to access sensitive information.

Affected products

• Kastle Access Control System Firmware: before 2024-05-01 (fixed in 2024-05-01)

Published 2024-09-19. Last modified 2026-06-17.