Researchers Uncover 'Unsaflok' Security Flaws in Millions of Hotel Room Locks Worldwide
-
Researchers discovered flaws dubbed "Unsaflok" impacting 3 million Saflok electronic locks in 13,000 hotels worldwide, allowing them to easily unlock any door.
-
The flaws allow attackers to forge keycards to unlock hotel room doors after reading just one keycard from the property.
-
Dormakaba was notified of the issues in November 2022 but 64% of locks remain vulnerable as of March 2024 due to the complicated mitigation process.
-
Guests can check if their locks are vulnerable using the NFC Taginfo app to scan their keycards and see if they use the vulnerable MIFARE Classic type.
-
Dormakaba has been working to upgrade vulnerable locks since November 2022 but full mitigation will take an extended period of time across thousands of properties.