Electronic Lockers Vulnerable to Hacking, Research Shows
Recent research presented at the Defcon security conference has revealed potential vulnerabilities in electronic lockers commonly found in gyms, offices, and schools. Security researchers demonstrated how hackers could exploit these weaknesses to gain unauthorized access to administrator keys, posing a significant security risk.
Digital Administrative Keys at Risk
During the research, experts Dennis Giese and “braelynn” focused on electronic locks manufactured by Digilock and Schulte-Schlagbaum. By conducting a proof-of-concept attack, they were able to extract digital administrative keys from lockers, duplicate them, and use them to unlock additional storage units. This process highlighted the ease with which hackers could compromise these systems using inexpensive tools.
Exposing Security Flaws
By dismantling electronic locks and accessing their firmware and stored data, researchers revealed the extent of the security vulnerabilities present in these systems. Information such as configured PINs, administrative keys, and program keys could be extracted and exploited by prepared hackers. This data could then be copied onto devices like Flipper Zero or Arduino boards to open other lockers, demonstrating the widespread impact of these vulnerabilities.