Potential Alarm Override at ATMs
Edge One has been made aware of a potential security vulnerability that could exist for customers deploying the DormaKaba Cencon locks, installed on your ATM or ITM, configured with the optional SHUNT feature. If the SHUNT feature is enabled, access to your ATM/ITM safe, generally after hours, would be allowed with the alarm being bypassed when a correct combination and smart key are used on the Cencon lock. Specialized tests have shown, however, that this signal can change state with relatively low-level vibration or impact, which could compromise the intended security of the lock, depending on how the SHUNT function has been configured. Meaning, if your DormaKaba Cencon lock is impacted or tampered with in a certain way there is potential to disarm the alarm without any sort of key or combination.
Due to the serious implications of inaccurate alarm signals reporting, Edge One recommends that customers apply remediation to mitigate against this issue.
This will not impact you if ANY of the following are true:
- The ATM/ITM does not have a DormaKaba Cencon lock.
- The ATM/ITM safe is not alarmed.
- There is no afterhours access to the ATM/ITM.
- You are using an alarm panel at the ATM/ITM to disable the alarm.
You may be impacted if:
- The ATM/ITM is alarmed and does not have an alarm panel or box to disable the alarm.
Edge One Recommendations
Edge One recommends that customers determine if they are impacted by the potential alarm override. If it’s determined that you may be impacted, we recommend reaching out to your alarm and security vendor. They will need to configure the DormaKaba SHUNT feature to use the burglar switch rather than the lock shunt. Feel free to supply them the attached diagram and instructions.
This recommended remediation will require a site visit to each impacted terminal by your alarm vendor during which they will require access to the safe. Note: DormaKaba, Kaba Mas and Mas Hamilton all refer to the same product.
If you have questions, feel free to contact your Edge One Financial Solutions Specialist.
