dormakaba Kaba exos 9300 Weak Default Password Vulnerability

A vulnerability exists in the Kaba exos 9300 application, specifically in the U9ExosAdmin.exe component, where the default password for the extended admin user mode is hard-coded and documented in local user manuals. This vulnerability affects all versions of Kaba exos 9300 prior to 4.4.1.

Impact

Exploitation of this vulnerability allows unauthorized access to the extended admin user mode, where sensitive configurations can be managed.

Reproduction

The vulnerability can be reproduced by logging into the Kaba exos 9300 administration application U9ExosAdmin.exe using the default password 'ExtendedAdminMode'.

Remediation

Users are advised to update to Kaba exos 9300 version 4.4.1 or later, and to consult their dormakaba partner for guidance on updating and implementing security best practices.