What is CVE-2025-6030?

CVE-2025-6030 is a vulnerability in Autoeastern Cyclone Matrix Trf, classified under Authentication Bypass by Capture-replay. Published 2025-06-13.

Is CVE-2025-6030 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Autoeastern Cyclone Matrix Trf

CVE-2025-6030

Use of fixed learning codes, one code to lock the car and the other code to unlock it, in the Key Fob Transmitter in Cyclone Matrix TRF Smart Keyless Entry System, which allows a replay attack. Research was completed on the 2024 KIA Solu…

EPSS: 0.002 (10.1th percentile) — read the EPSS interpretation.

Affected products

Autoeastern Cyclone Matrix Trf — versions 2024

Weakness classification (CWE)

CWE-294 — Authentication Bypass by Capture-replay
CWE-307 — Improper Restriction of Excessive Authentication Attempts

Public proof-of-concept exploits

revers3everything/AutoRFKiller

References

cve@asrg.io (related)
cve@asrg.io (third-party-advisory)

Frequently asked questions

What is CVE-2025-6030?: CVE-2025-6030 is a vulnerability in Autoeastern Cyclone Matrix Trf, classified under Authentication Bypass by Capture-replay. Published 2025-06-13.
Is CVE-2025-6030 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.