Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
0.3

motogadget mo.lock Ignition Lock: Hardcoded Key Exposure

CVE-2025-6666 · published 11 months ago
Summary

A security issue has been found in motogadget's mo.lock Ignition Lock up to a certain date. An attacker could potentially access sensitive data by exploiting a weakness in the NFC feature. This could happen if an attacker targets the device. The good news is that exploiting this issue is difficult and the vendor has been notified.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
motogadget mo.lock ignition lock 20251125
Original advisory text
motogadget mo.lock Ignition Lock NFC hard-coded key
A vulnerability was determined in motogadget mo.lock Ignition Lock up to 20251125. Affected by this vulnerability is an unknown functionality of the component NFC Handler. Executing a manipulation can lead to use of hard-coded cryptographic key
. The physical device can be targeted for the attack. A high complexity level is associated with this attack. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
0.3 Low
Exploitation
<1% chance of attack within 30 days
Type
CWE-320Key Management Errors
CWE-321Use of Hard-coded Cryptographic Key
Timeline
Published29 Nov 2025
Updated30 Oct 2026
First seen7 Mar 2026
Sources
CVE-2025-6666 · NVD
CVE-2025-6666 · MITRE
Track software like this
Free during beta