CVE-2025-34500
Shuffle Master Deck Mate 2 Insecure Update Chain
Description
Deck Mate 2's firmware update mechanism accepts packages without cryptographic signature verification, encrypts them with a single hard-coded AES key shared across devices, and uses a truncated HMAC for integrity validation. Attackers with access to the update interface - typically via the unit's USB update port - can craft or modify firmware packages to execute arbitrary code as root, allowing persistent compromise of the device's integrity and deck randomization process. Physical or on-premises access remains the most likely attack path, though network-exposed or telemetry-enabled deployments could theoretically allow remote exploitation if misconfigured. The vendor confirmed that firmware updates have been issued to correct these update-chain weaknesses and that USB update access has been disabled on affected units.
INFO
Published Date :
Oct. 24, 2025, 11:15 p.m.
Last Modified :
Oct. 8, 2026, 11:10 a.m.
Remotely Exploit :
No
Source :
[email protected]
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | |||||
| CVSS 4.0 | HIGH | 83251b91-4cc7-4094-a5c7-464a1b83ea10 | ||||
| CVSS 4.0 | HIGH | [email protected] |
Solution
- Update Deck Mate 2 firmware to the latest version.
- Disable USB update access on affected units.
- Verify firmware integrity with strong cryptographic methods.
- Implement unique encryption keys for each device.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2025-34500.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2025-34500 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2025-34500
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2025-34500 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2025-34500 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Translated by [email protected]
Oct. 08, 2026
Action Type Old Value New Value Added Translation Title: Deck Mate 2 de Light & Wonder, Inc. / SHFL Entertainment, Inc. / Shuffle Master, Inc., Description: El mecanismo de actualización de firmware de Deck Mate 2 acepta paquetes sin verificación de firma criptográfica, los cifra con una única clave AES codificada compartida entre dispositivos y utiliza un HMAC truncado para la validación de integridad. Los atacantes con acceso a la interfaz de actualización - típicamente a través del puerto de actualización USB de la unidad - pueden crear o modificar paquetes de firmware para ejecutar código arbitrario como root, lo que permite el compromiso persistente de la integridad del dispositivo y del proceso de aleatorización de mazos. El acceso físico o in situ sigue siendo la ruta de ataque más probable, aunque las implementaciones expuestas a la red o con telemetría habilitada podrían teóricamente permitir la explotación remota si están mal configuradas. El proveedor confirmó que se han emitido actualizaciones de firmware para corregir estas debilidades en la cadena de actualización y que el acceso de actualización USB se ha deshabilitado en las unidades afectadas. -
CVE Modified by [email protected]
Jun. 17, 2026
Action Type Old Value New Value Added Affected [{'vendor': 'Light & Wonder, Inc. / SHFL Entertainment, Inc. / Shuffle Master, Inc.', 'modules': ['Update/decryption utility and package verification'], 'product': 'Deck Mate 2', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': 'all known versions prior to 2025-10-23', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}] -
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
Jun. 17, 2026
Action Type Old Value New Value Added SSVC {'id': 'CVE-2025-34500', 'role': 'CISA Coordinator', 'options': [{'exploitation': 'none'}, {'automatable': 'no'}, {'technicalImpact': 'partial'}], 'version': '2.0.3', 'timestamp': '2025-10-27T15:20:40.299784Z'} -
New CVE Received by [email protected]
Oct. 24, 2025
Action Type Old Value New Value Added Description Deck Mate 2's firmware update mechanism accepts packages without cryptographic signature verification, encrypts them with a single hard-coded AES key shared across devices, and uses a truncated HMAC for integrity validation. Attackers with access to the update interface - typically via the unit's USB update port - can craft or modify firmware packages to execute arbitrary code as root, allowing persistent compromise of the device's integrity and deck randomization process. Physical or on-premises access remains the most likely attack path, though network-exposed or telemetry-enabled deployments could theoretically allow remote exploitation if misconfigured. The vendor confirmed that firmware updates have been issued to correct these update-chain weaknesses and that USB update access has been disabled on affected units. Added CVSS V4.0 AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Added CWE CWE-327 Added CWE CWE-347 Added CWE CWE-321 Added Reference https://www.ioactive.com/wp-content/uploads/2025/05/IOActive-card-shuffler-security.pdf Added Reference https://www.vulncheck.com/advisories/shuffle-master-deck-mate-2-insecure-update-chain Added Reference https://www.wired.com/story/card-shuffler-hack/ Added Reference https://www.wired.com/story/how-hacked-card-shufflers-allegedly-enabled-a-mob-fueled-poker-scam-that-rocked-the-nba/