View CSAF

Summary

Successful exploitation of this vulnerability could result in an attacker being able to unlock and start the bicycle, leading to vehicle theft.

The following versions of Yadea T5 Electric Bicycle are affected:

T5 Electric Bicycle vers:all/* (CVE-2025-70994)

CVSS Vendor Equipment Vulnerabilities

v3 7.3 Yadea Yadea T5 Electric Bicycle Weak Authentication

Background

Critical Infrastructure Sectors: Transportation Systems

Countries/Areas Deployed: Worldwide

Company Headquarters Location: China

Vulnerabilities

Expand All +

CVE-2025-70994

Yadea T5 Electric Bicycles have a weak authentication mechanism which is vulnerable to signal forgery after a local attacker intercepts any legitimate key fob transmissions.

View CVE Details

Affected Products

Yadea T5 Electric Bicycle

Vendor:

Yadea

Product Version:

Yadea T5 Electric Bicycle: vers:all/*

Product Status:

known_affected

Relevant CWE: CWE-1390 Weak Authentication

Metrics

Acknowledgments

Ashen Chathuranga reported this…