CVE-2025-61081

Description

In BYD Atto3, an attacker can obtain an authentication key through Brute Force attack, which is permanently available. The authentication key enables flash to the Electronic Parking Break (EPB) and Supplemental Restoration System (SRS) related ECUs.

PUBLISHED Reserved 2025-09-26 | Published 2026-05-19 | Updated 2026-05-19 | Assigner mitre

References

www.notion.so/...b6156c8000b338db3c2011f637?source=copy_link exploit

www.notion.so/...2025-61081-26215fb6156c8000b338db3c2011f637 exploit

www.notion.so/...b6156c8000b338db3c2011f637?source=copy_link

www.notion.so/...2025-61081-26215fb6156c8000b338db3c2011f637

cve.org (CVE-2025-61081)

nvd.nist.gov (CVE-2025-61081)

Download JSON