Vulnerability in Be-Tech Mifare Classic Cards
CVE-2025-4053
The data stored in Be-Tech Mifare Classic card is stored in cleartext. An attacker having access to a Be-Tech hotel guest Mifare Classic card can create a master key card that unlocks all the locks in the building. This issue affects all Be-Tech Mifare Classic card systems. To fix the vulnerability, it is necessary to replace the software, encoder, cards, and PCBs in the locks.
EPSS: 0.001 (2.5th percentile) — read the EPSS interpretation.
Affected products
- Be-tech Mifare Classic Cards — versions 0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cvd@cert.pl (third-party-advisory)
Frequently asked questions
- What is CVE-2025-4053?
- CVE-2025-4053 is a vulnerability in Be-Tech Mifare Classic Cards, classified under Cleartext Storage of Sensitive Information. Published 2025-05-26.
- Is CVE-2025-4053 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.