Security-key disclosure via encoder channel downgrade

Information disclosure in HID Global encoder-capable readers allows physically proximate attackers to extract security keys from configuration cards. The encoder communication channel accepts a downgraded configuration and then reads credential and device-administration keys while programming a reader configuration card. Exploitation requires physical proximity to a card and an affected device configured as an encoder; exposed keys enable credential creation or reader-configuration changes.