VYPR

exos 9300

by dormakaba

CVEs (3)

  • CVE-2025-59097CriJan 26, 2026
    risk 0.60cvss epss 0.01

    The exos 9300 application can be used to configure Access Managers (e.g. 92xx, 9230 and 9290). The configuration is done in a graphical user interface on the dormakaba exos server. As soon as the save button is clicked in exos 9300, the whole configuration is sent to the…

  • CVE-2025-59092HigJan 26, 2026
    risk 0.57cvss epss 0.01

    An RPC service, which is part of exos 9300, is reachable on port 4000, run by the process FSMobilePhoneInterface.exe. This service is used for interprocess communication between services and the Kaba exos 9300 GUI, containing status information about the Access Managers.…

  • CVE-2025-59095MedJan 26, 2026
    risk 0.44cvss epss 0.00

    The program libraries (DLL) and binaries used by exos 9300 contain multiple hard-coded secrets. One notable example is the function "EncryptAndDecrypt" in the library Kaba.EXOS.common.dll. This algorithm uses a simple XOR encryption technique combined with a cryptographic key…