Kastle Systems Access Control System

Risk Summary

Successful exploitation of these vulnerabilities could allow an attacker to access sensitive information on the affected product.

CVEs (2)

Remediations

• Kastle Systems have fixed the system configuration vulnerabilities internally. No user interaction is required.
• CISA would like to highlight that this is a cloud-based solution hosted by Kastle Systems, and CISA's traditional mitigation strategies may not be applicable in this context.

Affected Vendors

Affected Products (1)

Affected Sectors

Commercial Facilities, Government Facilities