dormakaba Kaba exos 9300 System managementにおけるローカル権限昇格

The impact of this vulnerability is severe. A successful exploitation allows an attacker to gain complete control over the system running the Kaba exos 9300 System management application. This includes the ability to install malware, steal sensitive data, modify system configurations, and potentially pivot to other systems on the network. The SYSTEM privileges granted by this escalation effectively bypass standard security controls, making it a high-risk vulnerability. The ability to schedule arbitrary executables with elevated privileges mirrors the impact of other privilege escalation vulnerabilities, potentially allowing for full system compromise.

Organizations utilizing the Kaba exos 9300 System management application in physical access control systems are at significant risk. This includes facilities management companies, building security providers, and any organization relying on this system for access control. Legacy installations and systems with weak access controls are particularly vulnerable.

1. 2026-01-26Disclosure

   disclosure

1. 予約済み2025-09-09
2. 公開日2026-01-26
3. EPSS 更新日2026-03-23

Due to the absence of a direct patch, mitigation focuses on restricting access and preventing exploitation. Immediately restrict access to the d9sysdef.exe application to only authorized personnel. Implement strict file system permissions to prevent unauthorized modification of the application's configuration files. Consider disabling the scheduling functionality within the application if it is not essential. Regularly monitor system logs for suspicious activity, particularly any attempts to modify scheduled tasks or execute unexpected processes. After implementing these controls, verify their effectiveness by attempting to trigger the vulnerability in a controlled environment.