Description
The administrative credentials can be extracted through application API responses, mobile application reverse engineering, and device firmware reverse engineering. The exposure may result in an attacker gaining full administrative access to the Gardyn IoT Hub exposing connected devices to malicious control.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Gardyn Home Kit
Default version status: unaffected
0 to < master.619affected
Gardyn Home Kit Mobile Application
Default version status: unaffected
0 to < 2.11.0affected
Gardyn Home Kit Cloud API
Default version status: unaffected
0 to < 2.12.2026affected