Not scored
CVE-2025-1242
Administrative Credentials Can Be Extracted Through Gardyn API Responses
GardynHome Kit
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 26 Oct
0.6%probability of exploitation in the next 30 days
Higher than 47% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
The administrative credentials can be extracted through application API responses, mobile application reverse engineering, and device firmware reverse engineering. The exposure may result in an attacker gaining full administrative access to the Gardyn IoT Hub exposing connected devices to malicious control.
Coverage 1 article · 1 outlet
- Gardyn IoT flaws allow remote hacking via CVE-2025-29631SecurityWeek · first in our coverage · mentions it in passing