{"id":"CVE-2025-6521","aliases":["EUVD-2025-28746","GHSA-59p9-f7jg-cpj5"],"status":"published","title":"TrendMakers Sight Bulb Pro Use of a Broken or Risky Cryptographic Algorithm","description":"During the initial setup of the device the user connects to an access \npoint broadcast by the Sight Bulb Pro. During the negotiation, AES \nEncryption keys are passed in cleartext. If captured, an attacker may be\n able to decrypt communications between the management app and the Sight\n Bulb Pro which may include sensitive information such as network \ncredentials.","severity":{"version":"4.0","score":6.8,"vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00089,"percentile":0.00408,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-327"],"published":"2025-06-27T17:06:55Z","modified":"2026-06-17T10:02:04Z","products":[{"vendor":"trendmakers","product":"sight bulb pro firmware zj_cg32-2201"}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-25-177-02"},{"url":"https://www.trendmakerscares.com/Customer-Service-Hours"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-6521"},{"url":"https://github.com/advisories/GHSA-59p9-f7jg-cpj5"}],"sources":{"cve":[{"id":"CVE-2025-6521","title":"TrendMakers Sight Bulb Pro Use of a Broken or Risky Cryptographic Algorithm","description":"During the initial setup of the device the user connects to an access \npoint broadcast by the Sight Bulb Pro. During the negotiation, AES \nEncryption keys are passed in cleartext. If captured, an attacker may be\n able to decrypt communications between the management app and the Sight\n Bulb Pro which may include sensitive information such as network \ncredentials.","status":"published","published":"2025-06-27T17:06:55.087Z","modified":"2025-06-27T17:29:48.416Z","cvss":[{"version":"4.0","score":6.8,"vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","level":"medium","assessor":"cna"},{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T14:32:40.072186Z"}],"euvd":[{"id":"EUVD-2025-28746","description":"During the initial setup of the device the user connects to an access \npoint broadcast by the Sight Bulb Pro. During the negotiation, AES \nEncryption keys are passed in cleartext. If captured, an attacker may be\n able to decrypt communications between the management app and the Sight\n Bulb Pro which may include sensitive information such as network \ncredentials.","status":"published","published":"2025-06-27T17:06:55Z","modified":"2025-06-27T17:29:48Z","cvss":[{"version":"4.0","score":6.8,"vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T20:32:15.785343Z"}],"ghsa":[{"id":"GHSA-59p9-f7jg-cpj5","title":"During the initial setup of the device the user connects to an access \npoint broadcast by the...","description":"During the initial setup of the device the user connects to an access \npoint broadcast by the Sight Bulb Pro. During the negotiation, AES \nEncryption keys are passed in cleartext. If captured, an attacker may be\n able to decrypt communications between the management app and the Sight\n Bulb Pro which may include sensitive information such as network \ncredentials.","status":"published","published":"2025-06-27T18:30:44Z","modified":"2025-06-27T18:30:51Z","cvss":[{"version":"4.0","score":6.8,"vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"},{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T15:02:51.611786Z"}],"nvd":[{"id":"CVE-2025-6521","description":"During the initial setup of the device the user connects to an access \npoint broadcast by the Sight Bulb Pro. During the negotiation, AES \nEncryption keys are passed in cleartext. If captured, an attacker may be\n able to decrypt communications between the management app and the Sight\n Bulb Pro which may include sensitive information such as network \ncredentials.","status":"published","published":"2025-06-27T17:15:35.073Z","modified":"2026-06-17T10:02:04.14Z","cvss":[{"version":"4.0","score":6.8,"vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T14:11:14.781314Z"}]}}