AuntyFey Smart Combination Lock BLE Connection Flood DoS_CVE-2025-15474

5.3 / 10

MEDIUM

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Description

AuntyFey Smart Combination Lock firmware versions as of 2025-12-24 contain a vulnerability that allows an unauthenticated attacker within Bluetooth Low Energy (BLE) range to cause a denial of service by repeatedly initiating BLE connections. Sustained connection attempts interrupt keypad authentication input and repeatedly force the device into lockout states, preventing legitimate users from unlocking the device.

Basic Information

ID CVE-2025-15474

Source VulnCheck

Published Jan 7, 2026 at 04:33

Affected Product

Vendor AuntyFey

Product AuntyFey Smart Combination Lock

Affected Versions AuntyFey AuntyFey Smart Combination Lock 0

CWE Classification

CWE-770

References

{
    "lastseen": "",
    "description": "AuntyFey Smart Combination Lock firmware versions as of 2025-12-24 contain a vulnerability that allows an unauthenticated attacker within Bluetooth Low Energy (BLE) range to cause a denial of service by repeatedly initiating BLE connections. Sustained connection attempts interrupt keypad authentication input and repeatedly force the device into lockout states, preventing legitimate users from unlocking the device.",
    "published": "2026-01-07T04:33:17.467Z",
    "modified": "2026-01-07T04:33:17.467Z",
    "type": "cve",
    "title": "AuntyFey Smart Combination Lock BLE Connection Flood DoS",
    "source": "VulnCheck",
    "references": "https://github.com/nsm-barii/ble-smartlock-dos\nhttps://www.amazon.com/dp/B0F9L1M4XG\nhttps://www.vulncheck.com/advisories/auntyfey-smart-combination-lock-ble-connection-flood-dos",
    "id": "CVE-2025-15474",
    "bulletinFamily": "",
    "cwe": [
        "CWE-770"
    ],
    "cvelist": null,
    "sourceData": "AuntyFey AuntyFey Smart Combination Lock 0",
    "sourceHref": "",
    "cvss": {
        "score": 5.3,
        "severity": "MEDIUM",
        "vector": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "AuntyFey Smart Combination Lock",
    "version": "0",
    "vendor": "AuntyFey",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}