PT-2025-11508 · Unknown · Dorset Dg 201 Digital Lock

Published 2025-03-17 · Updated 2025-03-17 · CVE-2025-25650

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Dorset DG 201 Digital Lock version 2.2 220605

Description The issue concerns the storage of NFC card data, allowing attackers to produce cloned NFC cards and bypass authentication. This can lead to unauthorized access.

Recommendations For version 2.2 220605, consider restricting access to the NFC card data storage mechanism until a patch is available. As a temporary workaround, implement additional authentication measures to minimize the risk of exploitation.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2025-25650

Affected Products

Dorset Dg 201 Digital Lock

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-25650 · Security Note
• https://getkisi.com/blog/how-to-copy-access-cards-and-keyfobs · Note
• https://twitter.com/WolfgangSesin/status/1901662273216933980 · Twitter Post
• https://github.com/AbhijithAJ/Dorset_SmartLock_Vulnerability/blob/main/Dorset_Smart_Lock_Security_Assessment_Report.pdf · Note
• https://t.me/cvedetector/20472 · Telegram Post
• https://twitter.com/CVEnew/status/1901647339200082384 · Twitter Post
• https://media.blackhat.com/us-13/US-13-Brown-RFID-Hacking-Live-Free-or-RFID-Hard-Slides.pdf · Note
• https://t.me/cvetracker/19292 · Telegram Post