CVE-2025-6666: motogadget mo.lock Ignition Lock NFC hard-coded key

Severity: low (CVSS 2.0 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-11-29 · updated 2026-10-07
Weakness: CWE-320

Description

A vulnerability was determined in motogadget mo.lock Ignition Lock up to 20251125. Affected by this vulnerability is an unknown functionality of the component NFC Handler. Executing a manipulation can lead to use of hard-coded cryptographic key . The physical device can be targeted for the attack. A high complexity level is associated with this attack. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

motogadget mo.lock Ignition Lock: 20251125

References

https://doi.org/10.22541/au.176463785.56572068/v1
https://office.dngr.us/s/iZHrwtf2xRPoeJj/download
https://vuldb.com/cve/CVE-2025-6666
https://vuldb.com/submit/701162
https://vuldb.com/vuln/333785
https://vuldb.com/vuln/333785/cti

Get alerted when CVE-2025-6666 or the next vulnerability affects your stack