CVE-2025-6666

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-6666", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2025-06-25T14:45:46.865Z", "datePublished": "2025-11-29T09:02:08.234Z", "dateUpdated": "2026-08-17T04:40:34.261Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-08-17T04:40:34.261Z"}, "title": "motogadget mo.lock Ignition Lock NFC hard-coded key", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-321", "lang": "en", "description": "Use of Hard-coded Cryptographic Key"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-320", "lang": "en", "description": "Key Management Error"}]}], "affected": [{"vendor": "motogadget", "product": "mo.lock Ignition Lock", "versions": [{"version": "20251125", "status": "affected"}], "cpes": ["cpe:2.3:a:motogadget:mo.lock_ignition_lock:*:*:*:*:*:*:*:*"], "modules": ["NFC Handler"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was determined in motogadget mo.lock Ignition Lock up to 20251125. Affected by this vulnerability is an unknown functionality of the component NFC Handler. Executing a manipulation can lead to use of hard-coded cryptographic key\r . The physical device can be targeted for the attack. A high complexity level is associated with this attack. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 1, "vectorString": "CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P", "baseSeverity": "LOW"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 2, "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R", "baseSeverity": "LOW"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 2, "vectorString": "CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R", "baseSeverity": "LOW"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 1.2, "vectorString": "AV:L/AC:H/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:UR"}}], "timeline": [{"time": "2025-11-29T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2025-11-29T01:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-08-17T06:45:25.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "A. E. Graafstra", "type": "finder"}, {"lang": "en", "value": "M. P. Faith", "type": "finder"}, {"lang": "en", "value": "A. C. Buglione", "type": "finder"}, {"lang": "en", "value": "drewbug (VulDB User)", "type": "reporter"}, {"lang": "en", "value": "drewbug (VulDB User)", "type": "analyst"}, {"lang": "en", "value": "VulDB CNA Team", "type": "coordinator"}], "references": [{"url": "https://vuldb.com/vuln/333785", "name": "VDB-333785 | motogadget mo.lock Ignition Lock NFC hard-coded key", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/333785/cti", "name": "VDB-333785 | CTI Indicators (IOB, IOC, TTP)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2025-6666", "name": "CVE-2025-6666 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/701162", "name": "Submit #701162 | motogadget mo.lock NFC CWE-290, CWE-327, CWE-1394", "tags": ["third-party-advisory"]}, {"url": "https://doi.org/10.22541/au.176463785.56572068/v1", "tags": ["broken-link"]}, {"url": "https://office.dngr.us/s/iZHrwtf2xRPoeJj/download", "tags": ["related"]}], "x_generator": ["VulDB PVTS v202608"]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-12-03T15:45:33.658835Z", "id": "CVE-2025-6666", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-03T15:45:42.735Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-6666", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-03T15:45:33.658835Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-03T15:45:36.320Z"}}], "cna": {"title": "motogadget mo.lock Ignition Lock NFC hard-coded key", "credits": [{"lang": "en", "type": "finder", "value": "A. E. Graafstra"}, {"lang": "en", "type": "finder", "value": "M. P. Faith"}, {"lang": "en", "type": "finder", "value": "A. C. Buglione"}, {"lang": "en", "type": "reporter", "value": "drewbug (VulDB User)"}, {"lang": "en", "type": "analyst", "value": "drewbug (VulDB User)"}, {"lang": "en", "type": "coordinator", "value": "VulDB CNA Team"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 1, "baseSeverity": "LOW", "vectorString": "CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 2, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 2, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 1.2, "vectorString": "AV:L/AC:H/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:UR"}}], "affected": [{"cpes": ["cpe:2.3:a:motogadget:mo.lock_ignition_lock:*:*:*:*:*:*:*:*"], "vendor": "motogadget", "modules": ["NFC Handler"], "product": "mo.lock Ignition Lock", "versions": [{"status": "affected", "version": "20251125"}]}], "timeline": [{"lang": "en", "time": "2025-11-29T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2025-11-29T01:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-08-17T06:45:25.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/333785", "name": "VDB-333785 | motogadget mo.lock Ignition Lock NFC hard-coded key", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/333785/cti", "name": "VDB-333785 | CTI Indicators (IOB, IOC, TTP)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2025-6666", "name": "CVE-2025-6666 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/701162", "name": "Submit #701162 | motogadget mo.lock NFC CWE-290, CWE-327, CWE-1394", "tags": ["third-party-advisory"]}, {"url": "https://doi.org/10.22541/au.176463785.56572068/v1", "tags": ["broken-link"]}, {"url": "https://office.dngr.us/s/iZHrwtf2xRPoeJj/download", "tags": ["related"]}], "x_generator": ["VulDB PVTS v202608"], "descriptions": [{"lang": "en", "value": "A vulnerability was determined in motogadget mo.lock Ignition Lock up to 20251125. Affected by this vulnerability is an unknown functionality of the component NFC Handler. Executing a manipulation can lead to use of hard-coded cryptographic key\r . The physical device can be targeted for the attack. A high complexity level is associated with this attack. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-321", "description": "Use of Hard-coded Cryptographic Key"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-320", "description": "Key Management Error"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-08-17T04:40:34.261Z"}}}, "cveMetadata": {"cveId": "CVE-2025-6666", "state": "PUBLISHED", "dateUpdated": "2026-08-17T04:40:34.261Z", "dateReserved": "2025-06-25T14:45:46.865Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2025-11-29T09:02:08.234Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:motogadget:mo.lock_ignition_lock:*:*:*:*:*:*:*:*"], "modules": ["NFC Handler"], "product": "mo.lock Ignition Lock", "vendor": "motogadget", "versions": [{"status": "affected", "version": "20251125"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability was determined in motogadget mo.lock Ignition Lock up to 20251125. Affected by this vulnerability is an unknown functionality of the component NFC Handler. Executing a manipulation can lead to use of hard-coded cryptographic key\r . The physical device can be targeted for the attack. A high complexity level is associated with this attack. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way."}, {"lang": "es", "value": "Una vulnerabilidad fue determinada en motogadget mo.lock Ignition Lock hasta 20251125. Afectada por esta vulnerabilidad es una funcionalidad desconocida del componente NFC Gestor. Ejecutar manipulaci\u00f3n puede llevar al uso de clave criptogr\u00e1fica codificada de forma r\u00edgida. El dispositivo f\u00edsico puede ser objetivo del ataque. Un alto nivel de complejidad est\u00e1 asociado con este ataque. La explotaci\u00f3n parece ser dif\u00edcil. El proveedor fue contactado tempranamente sobre esta divulgaci\u00f3n, pero no respondi\u00f3 de ninguna manera."}], "id": "CVE-2025-6666", "lastModified": "2026-10-07T20:10:01.970", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "HIGH", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 1.2, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:L/AC:H/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 1.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "PHYSICAL", "availabilityImpact": "NONE", "baseScore": 2.0, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 0.5, "impactScore": 1.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "HIGH", "attackRequirements": "NONE", "attackVector": "PHYSICAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 0.3, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-6666", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-12-03T15:45:33.658835Z", "version": "2.0.3"}}]}, "published": "2025-11-29T09:15:44.757", "references": [{"source": "cna@vuldb.com", "url": "https://doi.org/10.22541/au.176463785.56572068/v1"}, {"source": "cna@vuldb.com", "url": "https://office.dngr.us/s/iZHrwtf2xRPoeJj/download"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/cve/CVE-2025-6666"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/701162"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/333785"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/333785/cti"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-320"}, {"lang": "en", "value": "CWE-321"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{}