Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2025-4053

Unauthorized creation of master key in Mifare Classic Be-Tech cards

Description

The data stored in Be-Tech Mifare Classic card is stored in cleartext. An attacker having access to a Be-Tech hotel guest Mifare Classic card can create a master key card that unlocks all the locks in the building. This issue affects all Be-Tech Mifare Classic card systems. To fix the vulnerability, it is necessary to replace the software, encoder, cards, and PCBs in the locks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Be-Tech Mifare Classic cards

Default version status: unaffected

  • 0 to ≤ *affected

References