CVE-2025-34502 Details

A vulnerability exists in the Shuffle Master Deck Mate 2 automated card shuffler due to the absence of a secure boot process and runtime integrity checks for its controller and display modules. This flaw enables an attacker with physical access to alter the bootloader, kernel, or filesystem, achieving persistent code execution that endures across power cycles. Such modifications can be exploited to manipulate the shuffler's operations, potentially facilitating cheating in poker games. Although the manufacturer has released a firmware update to address these issues, the vulnerability highlights significant security shortcomings in the device's design and implementation.

Shuffle Master has released a firmware update that strengthens the integrity of the update process and disables physical update ports to reduce the risk of exploitation. However, further improvements are needed to address the fundamental security flaws that allowed this vulnerability to exist.