{"id":"CVE-2025-25650","aliases":["EUVD-2025-6571","GHSA-78pj-pg5h-qf98"],"status":"published","title":"An issue in the storage of NFC card data in Dorset DG 201 Digital Lock H5_433WBSK_v2.2_220605...","description":"An issue in the storage of NFC card data in Dorset DG 201 Digital Lock H5_433WBSK_v2.2_220605 allows attackers to produce cloned NFC cards to bypass authentication.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00931,"percentile":0.60883,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-522"],"published":"2025-03-17T00:00:00Z","modified":"2026-06-17T09:00:59Z","exploits":[{"source":"pocgithub","id":"AbhijithAJ/Dorset_SmartLock_Vulnerability","title":"AbhijithAJ/Dorset_SmartLock_Vulnerability","date":"2025-03-16","url":"https://github.com/AbhijithAJ/Dorset_SmartLock_Vulnerability"}],"references":[{"url":"https://www.getkisi.com/blog/how-to-copy-access-cards-and-keyfobs"},{"url":"https://media.blackhat.com/us-13/US-13-Brown-RFID-Hacking-Live-Free-or-RFID-Hard-Slides.pdf"},{"url":"https://github.com/AbhijithAJ/Dorset_SmartLock_Vulnerability/blob/main/Dorset_Smart_Lock_Security_Assessment_Report.pdf"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-25650"},{"url":"https://github.com/advisories/GHSA-78pj-pg5h-qf98"}],"sources":{"cve":[{"id":"CVE-2025-25650","description":"An issue in the storage of NFC card data in Dorset DG 201 Digital Lock H5_433WBSK_v2.2_220605 allows attackers to produce cloned NFC cards to bypass authentication.","status":"published","published":"2025-03-17T00:00:00Z","modified":"2025-03-19T18:29:12.285Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"adp"}],"cwes":["CWE-522"],"updated_at":"2026-11-02T14:32:31.971896Z"}],"euvd":[{"id":"EUVD-2025-6571","description":"An issue in the storage of NFC card data in Dorset DG 201 Digital Lock H5_433WBSK_v2.2_220605 allows attackers to produce cloned NFC cards to bypass authentication.","status":"published","published":"2025-03-17T00:00:00Z","modified":"2025-03-19T18:29:12Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T20:52:58.604029Z"}],"ghsa":[{"id":"GHSA-78pj-pg5h-qf98","title":"An issue in the storage of NFC card data in Dorset DG 201 Digital Lock H5_433WBSK_v2.2_220605...","description":"An issue in the storage of NFC card data in Dorset DG 201 Digital Lock H5_433WBSK_v2.2_220605 allows attackers to produce cloned NFC cards to bypass authentication.","status":"published","published":"2025-03-17T15:31:50Z","modified":"2025-03-19T21:30:49Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"cwes":["CWE-522"],"updated_at":"2026-11-02T15:00:21.948026Z"}],"nvd":[{"id":"CVE-2025-25650","description":"An issue in the storage of NFC card data in Dorset DG 201 Digital Lock H5_433WBSK_v2.2_220605 allows attackers to produce cloned NFC cards to bypass authentication.","status":"published","published":"2025-03-17T15:15:44.293Z","modified":"2026-06-17T09:00:59.173Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"secondary"}],"cwes":["CWE-522"],"updated_at":"2026-11-02T14:10:54.744127Z"}]}}