CVE-2024-58311 Dormakaba Saflok System 6000 Key Generation Cryptographic Weakness
Attackers can derive valid access keys from card identifiers due to predictable key generation, bypassing physical security controls.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-58311?
CVE-2024-58311 is a high-severity vulnerability in Dormakaba Saflok System 6000, published on 12 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Dormakaba Saflok System 6000 contains a predictable key generation algorithm that allows attackers to derive card access keys from a 32-bit unique identifier. Attackers can exploit the deterministic key generation process by calculating valid access keys using a simple mathematical transformation of the card's unique identifier.
Weakness: CWE-1245
Which versions are affected by CVE-2024-58311?
How do I fix CVE-2024-58311?
No fix has been published for CVE-2024-58311 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-58311 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-58311 exists.
Sources
Also known as GHSA-662h-839m-x83f.