AuntyFey vulnerabilities

🔔 Create alert RSS

Published CVEs affecting AuntyFey products: 1 record(s), with severity, exploitation and fixes.

AuntyFey Smart Combination Lock 1

Exploited only (KEV) →

CVE-2025-15474 Medium · 5.3 CWE-770 Jan 7, 2026

AuntyFey Smart Combination Lock BLE Connection Flood DoS

AuntyFey Smart Combination Lock firmware versions as of 2025-12-24 contain a vulnerability that allows an unauthenticated attacker within Bluetooth Low Energy (BLE) range to cause a denial of service by repeatedly initiating BLE connections. Sustained connection attempts interrupt keypad authentication input and repeatedly force the device into lockout states, preventing legitimate users from unlocking the device.