Skip to main content
EPSS 0.1%top 96%

CVE-2025-6666: Use of Hard-coded Cryptographic Key in motogadget mo.lock Ignition Lock

0
Low
VulnerabilityCVE-2025-6666cvecve-2025-6666
Published: 11/29/2025 (11/29/2025, 09:02:08 UTC)
Source: CVE Database V5
Vendor/Project: motogadget
Product: mo.lock Ignition Lock

Description

A vulnerability was determined in motogadget mo.lock Ignition Lock up to 20251125. Affected by this vulnerability is an unknown functionality of the component NFC Handler. Executing a manipulation can lead to use of hard-coded cryptographic key . The physical device can be targeted for the attack. A high complexity level is associated with this attack. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS v4.0

Score 1.0low

Attack Vector
Physical
Attack Complexity
High
Attack Requirements
None
Privileges Required
None
User Interaction
None
Vuln. Confidentiality
Low
Vuln. Integrity
None
Vuln. Availability
None
Subsq. Confidentiality
None
Subsq. Integrity
None
Subsq. Availability
None
CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P

Affected software

Affected versions
=20251125

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 08/17/2026, 13:27:35 UTC

Technical Analysis

This vulnerability affects the motogadget mo.lock Ignition Lock product, specifically an unknown functionality within the NFC Handler component. The issue is the use of a hard-coded cryptographic key, which could potentially be exploited by an attacker with physical access to the device. The attack complexity is high, and no privileges or user interaction are required for exploitation. The vendor has not provided any response or patch information regarding this vulnerability.

Potential Impact

The impact is limited due to the high complexity of exploitation and the requirement for physical access. The use of a hard-coded cryptographic key could potentially allow an attacker to bypass certain security controls related to the NFC Handler, but no further impact details are provided. The CVSS score of 1 indicates a low severity risk.

Mitigation Recommendations

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch links are available, users should monitor for official updates from motogadget. Until a fix is released, physical security of the device should be maintained to reduce risk.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Data Version
5.2
Assigner Short Name
VulDB
Date Reserved
2025-06-25T14:45:46.865Z
Cvss Version
4.0
State
PUBLISHED

Threat ID: 692aba9af06c0845ceb4025c

Added to database: 11/29/2025, 09:19:22 UTC

Last enriched: 08/17/2026, 13:27:35 UTC

Last updated: 09/10/2026, 19:36:51 UTC

Views: 299

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses