CVE-2025-59090

On the exos 9300 server, a SOAP API is reachable on port 8002. This API does not require any authentication prior to sending requests. Therefore, network access to the exos server allows e.g. the creation of arbitrary access log events as well as querying the 2FA PINs associated with the enrolled chip cards.

On the exos 9300 server, a SOAP API is reachable on port 8002. This API does not require any authentication prior to sending requests. Therefore, network access to the exos server allows e.g. the creation of arbitrary access log events as well as querying the 2FA PINs associated with the enrolled chip cards.

En el servidor exos 9300, una API SOAP es accesible en el puerto 8002. Esta API no requiere ninguna autenticación antes de enviar solicitudes. Por lo tanto, el acceso a la red al servidor exos permite, por ejemplo, la creación de eventos de registro de acceso arbitrarios, así como la consulta de los PIN 2FA asociados con las tarjetas con chip registradas.