CVE-2025-1242 - Vulnerability Analysis

Overview

Gardyn IoT Hub contains an information disclosure caused by exposure of administrative credentials through API responses, mobile app, and firmware reverse engineering, letting attackers gain full administrative access, exploit requires access to application or device firmware.

Severity & Score

Impact

Attackers can gain full administrative access, allowing malicious control over connected devices.

Mitigation

Update to the latest version or apply patches that secure credential exposure.

References

• https://mygardyn.com/security/
• https://www.cisa.gov/news-events/ics-advisories/icsa-26-055-03
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-055-03.json

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner