boxscore/security
CVE · referencelatest edition

Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2025-6666LOW
motogadget mo.lock Ignition Lock NFC hard-coded key
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   P   H   N   N   N   L   N   N    0.3   .0014    4.0     —
AFFECTED
  Product                Versions    Fixed
  mo.lock Ignition Lock  20251125 –  —
TIMELINE
  Jun 25  Reserved by VulDB
  Nov 29  Published (CNA: VulDB)
  Aug 17  RESCORED — CVE-2025-6666 (motogadget mo.lock Ignition Lock). CVSS 1 → 0.3 (NVD).
CWE-321, CWE-320 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Deferred

Description

A vulnerability was determined in motogadget mo.lock Ignition Lock up to 20251125. Affected by this vulnerability is an unknown functionality of the component NFC Handler. Executing a manipulation can lead to use of hard-coded cryptographic key . The physical device can be targeted for the attack. A high complexity level is associated with this attack. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.

Lifecycle

Complete event history — 3 events, chronological
DateEventDetail
June 25, 2025ReservedReserved by VulDB
November 29, 2025PublishedPublished (CNA: VulDB)
August 17, 2026RESCOREDRESCORED — CVE-2025-6666 (motogadget mo.lock Ignition Lock). CVSS 1 → 0.3 (NVD).

Affected

Affected products and packages — 1 row
VendorProduct / PackageEcosystemVersion introducedFixed
motogadgetmo.lock Ignition Lock20251125

Weaknesses

CWE-321 · CWE-320

References (6)

Related

Authoritative record: CVE-2025-6666 at cve.org

Vendors: motogadget

Weaknesses: CWE-321 · CWE-320

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2025-6666 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.