CVE-2025-67133

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-67133
An issue in Hero Motocorp Vida V1 Pro 2.0.7 allows a local attacker to cause a denial of service via the BLE component

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
http://hero.com Not Applicable
http://vida.com Not Applicable
https://threadpoolx.gitbook.io/docs/cve/cve-2025-67133-denial-of-service-via-unauthenticated-ble-connection Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:heromotocorp:vida_v1_pro_firmware:2.0.7:*:*:*:*:*:*:*
cpe:2.3:h:heromotocorp:vida_v1_pro:-:*:*:*:*:*:*:*
History

10 Feb 2026, 20:26

Type Values Removed Values Added
CPE cpe:2.3:h:heromotocorp:vida_v1_pro:-:*:*:*:*:*:*:*
cpe:2.3:o:heromotocorp:vida_v1_pro_firmware:2.0.7:*:*:*:*:*:*:*
References () http://hero.com - () http://hero.com - Not Applicable
References () http://vida.com - () http://vida.com - Not Applicable
References () https://threadpoolx.gitbook.io/docs/cve/cve-2025-67133-denial-of-service-via-unauthenticated-ble-connection - () https://threadpoolx.gitbook.io/docs/cve/cve-2025-67133-denial-of-service-via-unauthenticated-ble-connection - Exploit, Third Party Advisory
First Time Heromotocorp vida V1 Pro
Heromotocorp vida V1 Pro Firmware
Heromotocorp

09 Jan 2026, 17:15

Type Values Removed Values Added
CWE CWE-400
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.5

09 Jan 2026, 16:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-01-09 16:16

Updated : 2026-02-10 20:26

NVD link : CVE-2025-67133

Mitre link : CVE-2025-67133

CVE.ORG link : CVE-2025-67133

JSON object : View

Products Affected

heromotocorp

  • vida_v1_pro_firmware
  • vida_v1_pro
CWE
CWE-400

Uncontrolled Resource Consumption