important · Physical — Access control
Brief NFC proximity to a Norwegian Cruise Line keycard can yield a lasting duplicate door credential.
Affects
Norwegian Cruise Line shipboard door-access controllers using NTAG212 NFC keycards.
The reader authenticates only the card’s cleartext seven-byte UID, with no cryptographic challenge-response. Reading range is approximately 2–5 centimeters, and the duplicate still must be presented at the protected door.