Be-Tech Mifare Classic Cards Cleartext Data Storage Vulnerability Allowing Master Key Creation

A vulnerability exists in Be-Tech Mifare Classic cards, where data is stored in cleartext. This allows an attacker with access to a hotel guest card to create a master key card that can unlock all the locks in the building. The issue affects all Be-Tech Mifare Classic card systems.

Impact

Exploitation of this vulnerability allows for the creation of a master key card that unlocks all locks in a building, potentially leading to unauthorized access to guest rooms and other secured areas.

Remediation

To address this vulnerability, it is necessary to replace the software, encoder, cards, and PCBs in the locks.