Hackers Ian Carroll and Lennert Wouters drew public attention to the problem of hotel room security. Back in 2022, the Unsaflok group provided Dormakaba with convincing information about the presence of a vulnerability in its door locks.
Back in 2012, at the Black Hat hacker conference in Las Vegas, an anonymous cybersecurity specialist reported the presence of a vulnerability in the locks of the Onity company. It was related to the use of RFID tags, but at that time this technology was not widespread, so the company’s management decided not to do anything. The hackers reacted accordingly – they waited and made sure that nothing was being done, and then they began to hack the locks out of “sporting interest.”
In the case of Dormakaba, the situation may repeat itself. The vulnerability allows locks to be opened using fake RFID keys. Or, if you have an Android smartphone with an NFC module and the corresponding software, deceive the system even without direct contact with it. Eliminating the vulnerability is not difficult, if not for the financial factor – this requires reprogramming several million locks around the world.
Currently, as follows from public information, about 36% of Dormakaba locks have received the update. The rest are located in places where the devices do not have an Internet connection, and therefore cannot be controlled remotely. This requires sending technical support staff directly to each lock to install the update, which is not possible possible.
Source: Tech Cult
I am a professional journalist and content creator with extensive experience writing for news websites. I currently work as an author at Gadget Onus, where I specialize in covering hot news topics. My written pieces have been published on some of the biggest media outlets around the world, including The Guardian and BBC News.
