CVE-2025-6030

Severity CVSS v4.0:

CRITICAL

Type:

Unavailable / Other

Publication date:

13/06/2025

Last modified:

16/06/2025

Description

Use of fixed learning codes, one code to lock the car and the other code to unlock it, in the Key Fob Transmitter in Cyclone Matrix TRF Smart Keyless Entry System, which allows a replay attack.<br /> <br /> Research was completed on the 2024 KIA Soluto. Attack confirmed on other KIA Models in Ecuador.

Impact

Vector 4.0

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/AU:N CVSS v4.0 Severity and Metrics:

Base Score: 9.40 CRITICAL
Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/AU:N

Attack Vector (AV): Adjacent
Attack Complexity (AC): Low
Attack Requirements (AT): None
Privileges Required (PR): None
User Interaction (UI): None
Confidentiality (VC): High
Integrity (VI): High
Availability (VA): High
Confidentiality (SC): High
Integrity (SI): High
Availability (SA): High
Automatable (AU): No

Base Score 4.0

9.40

Severity 4.0

CRITICAL

CVE-2025-6030

Description

Impact

References to Advisories, Solutions, and Tools