Major security vulnerability discovered at SECURAM – Payday strikes again?

Significant Security Vulnerability Discovered in Keypad Locks

As announced at Def Con 2025, there is a security risk affecting electronic keypad locks from the manufacturer Securam ProLogic. It has been revealed that these locks can be opened using two different methods, without knowledge of the user-set code.
 

Reset Heist

With this method, the lock is provided with a generally valid reset code. Subsequently, the lock displays a factory reset code onscreen, which locksmiths then transmit to the manufacturer. Using these data, the manufacturer can calculate a reset code, which allows the lock to be opened without causing any damage. The problem with such procedures arises when the calculation algorithms become publicly accessible. In this specific case, it is possible to use a small Python script to compute the reset code on site and use it directly.

Another Method: Code Snatch

Another way to open these locks is through the so-called "Code Snatch" method. According to current knowledge, this involves removing the battery from the lock, which activates the debug port. In this scenario, an attacker can use a computer to directly read out the "super-code" and thus also open the lock.
 

Critical Security Assessment
Both techniques are considered highly critical. It remains to be seen how many of these locks have made their way to Europe and whether the public discovery of the vulnerability will result in their approval being withdrawn. The manufacturer appears undisturbed and refers to the "high technical level" required for exploitation, but past leaks have clearly demonstrated that it is only a matter of time before ready-made programs become available for any script kiddie to download and misuse. An update to address the vulnerability does not appear to be planned. Consequently,
affected individuals only have the option of purchasing a new lock.