CVE-2025-6666

A vulnerability was determined in motogadget mo.lock Ignition Lock up to 20251125. Affected by this vulnerability is an unknown functionality of the component NFC Handler. Executing a manipulation can lead to use of hard-coded cryptographic key . The physical device can be targeted for the attack. A high complexity level is associated with this attack. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS v3 2.0 LOW
CVSS v2.0 1.2 LOW

2.0^/10

CVSS v3 : LOW

Vector :

Exploitability : 0.5 / Impact : 1.4

Attack Vector PHYSICAL

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

1.2^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:H/Au:N/C:P/I:N/A:N

Exploitability : 1.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity HIGH

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://doi.org/10.22541/au.176463785.56572068/v1
https://office.dngr.us/s/iZHrwtf2xRPoeJj/download
https://vuldb.com/cve/CVE-2025-6666
https://vuldb.com/submit/701162
https://vuldb.com/vuln/333785
https://vuldb.com/vuln/333785/cti

Configurations

No configuration.

History

07 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Una vulnerabilidad fue determinada en motogadget mo.lock Ignition Lock hasta 20251125. Afectada por esta vulnerabilidad es una funcionalidad desconocida del componente NFC Gestor. Ejecutar manipulación puede llevar al uso de clave criptográfica codificada de forma rígida. El dispositivo físico puede ser objetivo del ataque. Un alto nivel de complejidad está asociado con este ataque. La explotación parece ser difícil. El proveedor fue contactado tempranamente sobre esta divulgación, pero no respondió de ninguna manera.

Information

Published : 2025-11-29 09:15

Updated : 2026-10-07 20:10

NVD link : CVE-2025-6666

Mitre link : CVE-2025-6666

CVE.ORG link : CVE-2025-6666

JSON object : View

Products Affected

No product.

CWE

CWE-320

Key Management Errors

CWE-321

Use of Hard-coded Cryptographic Key

{"id": "CVE-2025-6666", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-6666", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-03T15:45:33.658835Z"}}], "cvssMetricV2": [{"type": "Secondary", "source": "cna@vuldb.com", "cvssData": {"version": "2.0", "baseScore": 1.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:H/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "HIGH", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 1.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Secondary", "source": "cna@vuldb.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 2.0, "attackVector": "PHYSICAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 0.5}], "cvssMetricV40": [{"type": "Secondary", "source": "cna@vuldb.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 0.3, "Automatable": "NOT_DEFINED", "attackVector": "PHYSICAL", "baseSeverity": "LOW", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "PROOF_OF_CONCEPT", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "HIGH", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "cna@vuldb.com", "affectedData": [{"cpes": ["cpe:2.3:a:motogadget:mo.lock_ignition_lock:*:*:*:*:*:*:*:*"], "vendor": "motogadget", "modules": ["NFC Handler"], "product": "mo.lock Ignition Lock", "versions": [{"status": "affected", "version": "20251125"}]}]}], "published": "2025-11-29T09:15:44.757", "references": [{"url": "https://doi.org/10.22541/au.176463785.56572068/v1", "source": "cna@vuldb.com"}, {"url": "https://office.dngr.us/s/iZHrwtf2xRPoeJj/download", "source": "cna@vuldb.com"}, {"url": "https://vuldb.com/cve/CVE-2025-6666", "source": "cna@vuldb.com"}, {"url": "https://vuldb.com/submit/701162", "source": "cna@vuldb.com"}, {"url": "https://vuldb.com/vuln/333785", "source": "cna@vuldb.com"}, {"url": "https://vuldb.com/vuln/333785/cti", "source": "cna@vuldb.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "cna@vuldb.com", "description": [{"lang": "en", "value": "CWE-320"}, {"lang": "en", "value": "CWE-321"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability was determined in motogadget mo.lock Ignition Lock up to 20251125. Affected by this vulnerability is an unknown functionality of the component NFC Handler. Executing a manipulation can lead to use of hard-coded cryptographic key\r . The physical device can be targeted for the attack. A high complexity level is associated with this attack. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way."}, {"lang": "es", "value": "Una vulnerabilidad fue determinada en motogadget mo.lock Ignition Lock hasta 20251125. Afectada por esta vulnerabilidad es una funcionalidad desconocida del componente NFC Gestor. Ejecutar manipulaci\u00f3n puede llevar al uso de clave criptogr\u00e1fica codificada de forma r\u00edgida. El dispositivo f\u00edsico puede ser objetivo del ataque. Un alto nivel de complejidad est\u00e1 asociado con este ataque. La explotaci\u00f3n parece ser dif\u00edcil. El proveedor fue contactado tempranamente sobre esta divulgaci\u00f3n, pero no respondi\u00f3 de ninguna manera."}], "lastModified": "2026-10-07T20:10:01.970", "sourceIdentifier": "cna@vuldb.com"}