“An attacker will read the key and use a small hardware device to derive more keys to the facility. Tomi and Timo developed a custom software that allows creating a master key within minutes. The experts devised a custom-tailored device (actually an RFID reader/writer) that they held close to the VingCard locking system, it then tries different keys in less than one minute and finds the master key to unlock the door. Such kind of device is very cheap, it can be bought online for a few hundred dollars. Another option consists of booking a room and then use that card as the source.Īt this point, the attacker would need to write the electronic key and to do it he can use a portable programmer. The attacker can read the electronic key (RFID or magstripe) remotely by standing close to a hotel guest or employee having a keycard in his pocket. “The device can then be used instead of a key to bypass any lock in the facility, or alternatively, to overwrite an existing key with the newly created master key.” Within minutes the device is able to generate a master key to the facility.” continues the post published by F-Secure. These derived keys can be tested against any lock in the same building.

First, the attacker needs to get access to an electronic keycard used in the target facility, no matter it is currently active, experts noticed that even an expired key from a stay five years ago will work. Let’s see how hackers have built their ‘Master Key,’ step by step. “He worked side by side with F-Secure’s Timo Hirvonen, Senior Security Consultant, to devise a way to exploit the software system, known as Vision by VingCard.” “You can imagine what a malicious person could do with the power to enter any hotel room, with a master key created basically out of thin air,” says Tomi Tuominen, Practice Leader at F-Secure Cyber Security Services. The security duo has built a master key that could be used to unlock doors of the hotel rooms using the Vision by VingCard digital lock technology. The vulnerability was discovered by Tomi Tuominen and Timo Hirvonen, security researchers at F-Secure researchers. The Vision by VingCard locking system is currently deployed in more than 42,000 facilities in 166 different countries. The affected locking system is the Vision by VingCard manufactured by Assa Abloy, the flaw can be exploited to unlock hotel rooms worldwide.

Timo hirvonen f secure