NSM-Barii/CVE-2025-34462

NSM-Barii/CVE-2025-34462

GitHubGitHub
GitHubgithub.com
Releases0
Stars2
A denial-of-service vulnerability in the AuntyFey BLE smart padlock allows unauthenticated connection floods to lock out legitimate users. CVE-2025-34462.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-15474↗
——

AuntyFey Smart Combination Lock firmware versions as of 2025-12-24 contain a vulnerability that allows an unauthenticated attacker within Bluetooth Low Energy (BLE) range to cause a denial of service by repeatedly initiating BLE connections. Sustained connection attempts interrupt keypad authentication input and repeatedly force the device into lockout states, preventing legitimate users from unlocking the device.