Vulnerability Description
The administrative credentials can be extracted through application API responses, mobile application reverse engineering, and device firmware reverse engineering. The exposure may result in an attacker gaining full administrative access to the Gardyn IoT Hub exposing connected devices to malicious control.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-05
- https://mygardyn.com/security/
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-055-03
FAQ
What is CVE-2025-1242?
CVE-2025-1242 is a vulnerability with a CVSS score of 9.1 (CRITICAL). The administrative credentials can be extracted through application API responses, mobile application reverse engineering, and device firmware reverse engineering. The exposure may result in an attack...
How severe is CVE-2025-1242?
CVE-2025-1242 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2025-1242?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.