{"id":"CVE-2025-6521","state":"PUBLISHED","title":"TrendMakers Sight Bulb Pro Use of a Broken or Risky Cryptographic Algorithm","description":"During the initial setup of the device the user connects to an access \npoint broadcast by the Sight Bulb Pro. During the negotiation, AES \nEncryption keys are passed in cleartext. If captured, an attacker may be\n able to decrypt communications between the management app and the Sight\n Bulb Pro which may include sensitive information such as network \ncredentials.","publishedAt":"2025-06-27T17:06:55.087Z","updatedAt":"2025-06-27T17:29:48.416Z","severity":{"score":6.8,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","source":"icscert"},"assigner":"icscert","products":["TrendMakers Sight Bulb Pro Firmware ZJ_CG32-2201"],"affected":[{"vendor":"TrendMakers","product":"Sight Bulb Pro Firmware ZJ_CG32-2201","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"8.57.83","versionType":"custom"}]}],"references":["https://www.cisa.gov/news-events/ics-advisories/icsa-25-177-02","https://www.trendmakerscares.com/Customer-Service-Hours"],"weaknesses":["CWE-327"],"ingestedAt":"2026-10-29T20:10:04.440Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/6xxx/CVE-2025-6521.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-6521","state":"PUBLISHED","datePublished":"2025-06-27T17:06:55.087Z","dateUpdated":"2025-06-27T17:29:48.416Z","assignerShortName":"icscert","assignerOrgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateReserved":"2025-06-23T13:37:59.789Z"},"containers":{"cna":{"title":"TrendMakers Sight Bulb Pro Use of a Broken or Risky Cryptographic Algorithm","descriptions":[{"lang":"en","value":"During the initial setup of the device the user connects to an access \npoint broadcast by the Sight Bulb Pro. During the negotiation, AES \nEncryption keys are passed in cleartext. If captured, an attacker may be\n able to decrypt communications between the management app and the Sight\n Bulb Pro which may include sensitive information such as network \ncredentials."}],"affected":[{"vendor":"TrendMakers","product":"Sight Bulb Pro Firmware ZJ_CG32-2201","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"8.57.83","versionType":"custom"}]}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-25-177-02"},{"url":"https://www.trendmakerscares.com/Customer-Service-Hours"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"ADJACENT_NETWORK","availabilityImpact":"NONE","baseScore":7.6,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]},{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"ADJACENT","baseScore":6.8,"baseSeverity":"MEDIUM","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-327","description":"CWE-327","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"icscert","orgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateUpdated":"2025-06-27T17:06:55.087Z"},"credits":[{"lang":"en","type":"finder","value":"Fahim Balouch reported these vulnerabilities to CISA."}],"source":{"advisory":"ICSA-25-177-02","discovery":"EXTERNAL"},"workarounds":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"TrendMakers did not respond to CISA's request for coordination. <a target=\"_blank\" rel=\"nofollow\" href=\"https://www.trendmakerscares.com/Customer-Service-Hours\">Contact TrendMakers</a> directly for more information.\n\n<br>"}],"value":"TrendMakers did not respond to CISA's request for coordination.  Contact TrendMakers https://www.trendmakerscares.com/Customer-Service-Hours  directly for more information."}],"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-06-27T17:22:26.899939Z","id":"CVE-2025-6521","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-06-27T17:29:48.416Z"}}]}}}