NVD Vulnerability Detail
Search Exploit, PoC
CVE-2025-70994
Summary

Yadea T5 Electric Bicycles (models manufactured in/after 2024) have a weak authentication mechanism in their keyless entry system. The system utilizes the EV1527 fixed-code RF protocol without implementing rolling codes or cryptographic challenge-response mechanisms. This is vulnerable to signal forgery after a local attacker intercepts any legitimate key fob transmission, allowing for complete unauthorized vehicle operation via a replay attack.

Publication Date April 24, 2026, 12:36 a.m.
Registration Date April 25, 2026, 4:06 a.m.
Last Update April 24, 2026, 11:50 p.m.
CVSS3.1 : HIGH
スコア 7.3
Vector CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
攻撃元区分(AV) 隣接
攻撃条件の複雑さ(AC)
攻撃に必要な特権レベル(PR) 不要
利用者の関与(UI)
影響の想定範囲(S) 変更なし
機密性への影響(C) なし
完全性への影響(I)
可用性への影響(A)
Related information, measures and tools
Common Vulnerabilities List