Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Light & Wonder, Inc. / SHFL Entertainment, Inc. / Shuffle Master, Inc. Clear all filters
TI-2025-24527 CVE-2025-34501 · GHSA-434j-26h4-7637

Shuffle Master Deck Mate 2 Hard-coded Credentials & Exposed Services

Priority LOW 32

Deck Mate 2 is distributed with static, hard-coded credentials for the root shell and web user interface, while multiple management services (SSH, HTTP, Telnet, SMB, X11) are enabled by default.

CVSS 4.0HIGH 7.0 Physical No auth No interaction EPSS 0.00196 Published 2025-11-03 Fixed in all known versions prior to 2025-10-23 CWE-798
TI-2025-24528 CVE-2025-34502 · GHSA-3xvc-wfvf-2p2f

Shuffle Master Deck Mate 2 Missing Secure Boot

Priority LOW 32

Deck Mate 2 lacks a verified secure-boot chain and runtime integrity validation for its controller and display modules.

CVSS 4.0HIGH 7.0 Physical No auth No interaction EPSS 0.00206 Published 2025-10-24 Fixed in all known versions prior to 2025-10-23 CWE-1326
TI-2025-24526 CVE-2025-34500 · GHSA-rhx6-vj26-2frq

Shuffle Master Deck Mate 2 Insecure Update Chain

Priority LOW 30

Deck Mate 2's firmware update mechanism accepts packages without cryptographic signature verification, encrypts them with a single hard-coded AES key shared across devices, and uses a truncated HMAC for integrity validat…

CVSS 4.0HIGH 7.0 Physical No auth No interaction EPSS 0.0015 Published 2025-10-24 Fixed in all known versions prior to 2025-10-23 CWE-321