CVE-2024-58311: Dormakaba Saflok System 6000

Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Dormakaba Saflok System 6000 contains a predictable key generation algorithm that allows attackers to derive card access keys from a 32-bit unique identifier. Attackers can exploit the deterministic key generation process by calculating valid access keys using a simple mathematical transformation of the card's unique identifier.

Affected products

• Dormakaba Dormakaba Saflok System 6000: affected versions not specified

Published 2025-12-12. Last modified 2026-06-17.