Description (CNA)
With physical access to the device and enough time an attacker is able to solder test leads to the debug footprint (or use the 6-Pin tag-connect cable). Thus, the attacker gains access to the bootloader, where the kernel command line can be changed. An attacker is able to gain a root shell through this vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| dormakaba / Access Manager 92xx-k7 | affected 92xx-k7: <BAME 06.00 |
CWE
CWE-1234
References
- https://r.sec-consult.com/dormakaba
- https://r.sec-consult.com/dkaccess
- https://www.dormakabagroup.com/en/security-advisories
ADP enrichment
No English description supplied.
No references supplied.