PT-2025-22891 · Be Tech · Be-Tech Mifare Classic

Såawomir Jasek · CVE-2025-4053 · Published 2025-05-26 · Updated 2025-05-26

Positive Technologies (AI Summary)

CVSS v4.0

6.8

Medium

Base vector

AV:P/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Be-Tech Mifare Classic card systems (affected versions not specified)

Description The data stored in the Be-Tech Mifare Classic card is stored in cleartext. An attacker having access to a Be-Tech hotel guest Mifare Classic card can create a master key card that unlocks all the locks in the building. This issue affects all Be-Tech Mifare Classic card systems.

Recommendations To fix the vulnerability, it is necessary to replace the software, encoder, cards, and PCBs in the locks.

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2025-4053

Affected Products

Be-Tech Mifare Classic

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-4053 · Security Note
• https://t.me/cvenotify/123617 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1926953662217171043 · Twitter Post
• https://twitter.com/CVEnew/status/1926953324537897377 · Twitter Post
• https://t.me/cvetracker/24634 · Telegram Post
• https://cert.pl/en/posts/2025/05/CVE-2025-4053 · Note