CVE-2025-60250 MEDIUM

CVE-2025-60250

Vendor Unitree

Product Go2

Weakness CWE-321

Published September 26, 2025

Last update September 26, 2025

View on NVD All CVEs

CVSS base score

4.7/10

Attack vector Adjacent

Attack complexity Low

Privileges required None

User interaction None

Confidentiality None

Integrity Low

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

What the vulnerability does

01Description

Unitree Go2, G1, H1, and B2 devices through 2025-09-20 decrypt BLE packet data by using the df98b715d5c6ed2b25817b6f2554124a key and the 2841ae97419c2973296a0d4bdfe19a4f IV.

Key dates

02Disclosure timeline

September 26, 2025 CVE published

September 26, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-60250 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/321.html

Identifiers

CVE CVE-2025-60250

CWE CWE-321

CVSS 4.7 / MEDIUM

Affected versions

Vendor Unitree

Product Go2

Affected ≤ 2025-09-20

Vendor Unitree

Product G1

Affected ≤ 2025-09-20

Vendor Unitree

Product H1

Affected ≤ 2025-09-20

Vendor Unitree

Product B2

Affected ≤ 2025-09-20