important · Physical access
A nearby reader can clone Norwegian Cruise Line door credentials from their static NFC UID.
Affects
Norwegian Cruise Line shipboard door-access controllers using NTAG212 credentials; exact controller models and firmware builds were not disclosed.
The controller treats the seven-byte UID as the sole credential, so a copied or emulated value is accepted as the original card.
Detail and 1 source
CERT/CC reports failed vendor coordination and no shipped remediation.