16 matches found
CVE-2025-1242
CVE-2025-1242: Exposición de credenciales administrativas de IoT Hub Aviso Campo| Valor ---|--- CVE| CVE-2025-1242 ICSA| ICSA-26-055-03 CVSS 3.1| 9.1 Crítico Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CWE| CWE-798 Uso de credenciales codificadas Investigador| Michael Groberman — Gr0m...
CVE-2026-55726
CVE-2026-55726: Contenedor de Azure Blob Storage Listable Públicamente registros de dispositivos Aviso Campo| Valor ---|--- CVE| CVE-2026-55726 ICSA| ICSA-26-183-03 Gardyn IoT Hub CVSS 3.1| 5.3 Medio Vector 3.1| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Vector 4.0|...
gardyn-hack
Resumen En febrero de 2025 realicé una investigación de seguridad en un dispositivo Gardyn Home 4.0. Durante mi investigación, descubrí múltiples vulnerabilidades y malas prácticas de seguridad. Aprovechando estas vulnerabilidades, un atacante podría obtener acceso a nivel de sistema a un...
CVE-2026-32662
CERT/CC VU653116 | CISA Advisory ICSA-26-055-03 | All CVEs | Case Repository CVE-2026-32662: Active Debug Code in Production Advisory Field| Value ---|--- CVE| CVE-2026-32662 ICSA| ICSA-26-055-03 Update A CVSS 3.1| 5.3 Medium Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CWE| CWE-489 Activ...
gardyn
Resumen En febrero de 2025 realicé una investigación de seguridad en un dispositivo Gardyn Home 4.0. Durante mi investigación, descubrí múltiples vulnerabilidades y malas prácticas de seguridad. Al aprovechar estas vulnerabilidades, un atacante podría obtener acceso a nivel de sistema a un...
Exploit for CVE-2026-13768
CVE-2026-13768: Privileged IoT Hub Credential — Fleet Enumerat...
Gardyn Home Kit Cloud API和Gardyn Mobile Application 信任管理问题漏洞
Gardyn Home Kit Cloud API and Gardyn Mobile Application are products of the American company Gardyn. Gardyn Home Kit Cloud API is an indoor hydroponic cultivation system. Gardyn Mobile Application is a mobile control application. There are security vulnerabilities in Gardyn Home Kit Cloud API and...
Exploit for CVE-2025-1242
ICSA-26-055-03 — Gardyn Home Kit IoT Vulnerabilities CISA ICS...
EUVD-2025-22714
Malicious code in bioql PyPI...
CVE-2025-29629: Use of Default Credentials
Gardyn Home Kit firmware before master.619, Home Kit Mobile Application before 2.11.0, and Home Kit Cloud API before 2.12.2026 use weak default credentials for secure shell access. This may result in attackers gaining access to exposed Gardyn Home Kits...
CVE-2025-29629
CVE-2025-29629 affects Gardyn Home Kit ecosystem (Firmware < master.619, Mobile App < 2.11.0, Cloud API
CVE-2025-29631
Gardyn Home Kit firmware before master.619, Home Kit Mobile Application before 2.11.0, and Home Kit Cloud API before 2.12.2026 is vulnerable to command injection through vulnerable methods that do not sanitize input before passing content to the operating system for execution. The vulnerability m...
CVE-2025-29631: Improper Neutralization of Special Elements used in an OS Command
Gardyn Home Kit firmware before master.619, Home Kit Mobile Application before 2.11.0, and Home Kit Cloud API before 2.12.2026 allow command injection through vulnerable methods that do not sanitize input before passing content to the operating system for execution. The vulnerability may allow an...
Gardyn 4 安全漏洞
Gardyn 4 is a home vertical hydroponic growing system from Gardyn USA. A security vulnerability exists in Gardyn 4 that stems from mishandling of the component Gardyn Home, which could lead to information disclosure and execution of arbitrary code...
CVE-2025-29629
Gardyn Home Kit firmware before master.619, Home Kit Mobile Application before 2.11.0, and Home Kit Cloud API before 2.12.2026 uses weak default credentials for secure shell access. This may result in attackers gaining access to exposed Gardyn Home Kits...