CVE-2025-60250

MEDIUM EPSS 7.5%

Published Sep 26, 20259mo ago · Modified Jun 17, 20262w ago

4.7 CVSS 3.1

Medium

Published Sep 26, 2025 9mo ago

Last Modified Jun 17, 2026 2w ago

Description

Unitree Go2, G1, H1, and B2 devices through 2025-09-20 decrypt BLE packet data by using the df98b715d5c6ed2b25817b6f2554124a key and the 2841ae97419c2973296a0d4bdfe19a4f IV.

CVSS Details

Base Score

4.7

Exploitability

2.8

Impact

1.4

Vector string

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

Attack Vector Adjacent

Attack Complexity Low

Privileges Required None

User Interaction None

Scope Changed

Confidentiality None

Integrity Low

Availability None

Threat Intelligence

EPSS Exploit Probability

7.5% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-321

References 3

github.com https://github.com/Bin4ry/UniPwn
news.ycombinator.com https://news.ycombinator.com/item?id=45381590
spectrum.ieee.org https://spectrum.ieee.org/unitree-robot-exploit

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.