CVE-2025-34502: Deck Mate 2 0 to before all known versions prior to 2025-10-23

Affected technology

Deck Mate 2 · 0 to before all known versions prior to 2025-10-23
Light & Wonder, Inc. / SHFL Entertainment, Inc. / Shuffle Master, Inc.

Component: Bootloader / kernel / filesystem integrity verification

Attack conditions (Vendor/CNA, CVSS 4.0): Physical access · No privileges required · No user interaction required

What an attacker can do

An attacker with physical access can modify or replace the bootloader, kernel, or filesystem and gain persistent code execution on reboot. Vendor/CNA’s CVSS 4.0 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high.