CVE-2014-5381: Grand MA 300 allows a brute-force attack on the PIN.

Security readout for executives and security teams

CVE-2014-5381 describes a Grand MA 300 fingerprint reader weakness where PIN verification can be brute-forced. For executives, the concern is unauthorized access to a physical access-control device if the organization depends on PIN entry. The public record does not provide CVSS, affected versions, or confirmed active exploitation. Exposure is likely limited to environments that deployed Grand MA 300 fingerprint readers and use PIN verification. The provided affected-product metadata is incomplete and does not list versions, CPEs, or deployment conditions. Treat as a targeted physical-access risk, not a broad enterprise software emergency. Prioritize validation if Grand MA 300 devices protect sensitive sites, restricted rooms, or operational facilities. Mitigation focus: Inventory Grand MA 300 devices in access-control environments.; Check vendor or maintainer guidance for firmware or configuration remediation.; Reduce reliance on PIN-only access where compensating controls are available..

Prepared

Jun 6, 2026, 03:31 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.