CVE-2025-25650

An issue in the storage of NFC card data in Dorset DG 201 Digital Lock H5_433WBSK_v2.2_220605 allows attackers to produce cloned NFC cards to bypass…

Critical · published March 17, 2025

CVSS v3.1
9.1
EPSS
1%
Percentile
60.3
In the wild
Unconfirmed
What it is

🚨 NFC card data is stored so insecurely that an attacker can clone cards to bypass authentication entirely! 🔥 Think of it like a hotel that uses a keycard system, but the front desk makes copies of keycards without checking IDs — every guest could waltz into any room! If exploited, this vulnerability could lead to unauthorized access, allowing attackers to enter secure areas without a trace, potentially stealing sensitive information or sabotaging operations. The consequences could be absolutely devastating, leaving organizations exposed and vulnerable.

Put simply

Think of it like a hotel that uses a keycard system, but the front desk makes copies of keycards without checking IDs — every guest could waltz into any room! This vulnerability arises from improper storage of NFC card data in the Dorset DG 201 Digital Lock, enabling attackers to create cloned cards that can bypass authentication checks entirely.

What to do

If exploited, this vulnerability could lead to unauthorized access, allowing attackers to enter secure areas without a trace, potentially stealing sensitive information or sabotaging operations. The consequences could be absolutely devastating, leaving organizations exposed and vulnerable. Immediate patching to version H5_433WBSK_v2.2_220605 is crucial. Additionally, review security policies around NFC card issuance and storage, ensuring rigorous authentication measures are enforced. You've got this! With a few proactive steps, you can lock this vulnerability down and keep your systems secure. 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00931 · 60.3th percentile
Published
2025-03-17T00:00Z
EPSS history
Timeline
  • 17 MAR 00:00Z
    An issue in the storage of NFC card data in Dorset DG 201 Digital Lock H5_433WBSK_v2.2_220605 allows attackers to produce cloned NFC cards to bypass…
    cvelistv5