CVE-2025-6666: Use of Hard-coded Cryptographic Key in motogadget mo.lock Ignition Lock
A vulnerability was determined in motogadget mo.lock Ignition Lock up to 20251125. Affected by this vulnerability is an unknown functionality of the component NFC Handler. Executing a manipulation can lead to use of hard-coded cryptographic key . The physical device can be targeted for the attack. A high complexity level is associated with this attack. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.
AI Analysis
Technical Summary
This vulnerability affects the motogadget mo.lock Ignition Lock product, specifically an unknown functionality within the NFC Handler component. The issue is the use of a hard-coded cryptographic key, which could potentially be exploited by an attacker with physical access to the device. The attack complexity is high, and no privileges or user interaction are required for exploitation. The vendor has not provided any response or patch information regarding this vulnerability.
Potential Impact
The impact is limited due to the high complexity of exploitation and the requirement for physical access. The use of a hard-coded cryptographic key could potentially allow an attacker to bypass certain security controls related to the NFC Handler, but no further impact details are provided. The CVSS score of 1 indicates a low severity risk.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch links are available, users should monitor for official updates from motogadget. Until a fix is released, physical security of the device should be maintained to reduce risk.
CVE-2025-6666: Use of Hard-coded Cryptographic Key in motogadget mo.lock Ignition Lock
Description
A vulnerability was determined in motogadget mo.lock Ignition Lock up to 20251125. Affected by this vulnerability is an unknown functionality of the component NFC Handler. Executing a manipulation can lead to use of hard-coded cryptographic key . The physical device can be targeted for the attack. A high complexity level is associated with this attack. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS v4.0
Score 1.0low
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability affects the motogadget mo.lock Ignition Lock product, specifically an unknown functionality within the NFC Handler component. The issue is the use of a hard-coded cryptographic key, which could potentially be exploited by an attacker with physical access to the device. The attack complexity is high, and no privileges or user interaction are required for exploitation. The vendor has not provided any response or patch information regarding this vulnerability.
Potential Impact
The impact is limited due to the high complexity of exploitation and the requirement for physical access. The use of a hard-coded cryptographic key could potentially allow an attacker to bypass certain security controls related to the NFC Handler, but no further impact details are provided. The CVSS score of 1 indicates a low severity risk.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch links are available, users should monitor for official updates from motogadget. Until a fix is released, physical security of the device should be maintained to reduce risk.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2025-06-25T14:45:46.865Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 692aba9af06c0845ceb4025c
Added to database: 11/29/2025, 09:19:22 UTC
Last enriched: 08/17/2026, 13:27:35 UTC
Last updated: 09/10/2026, 19:36:51 UTC
Views: 299
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.