Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Gardyn Home Kit Firmware master.619 Clear all filters
TI-2025-21149 CVE-2025-29631 · GHSA-4993-4c8h-h8w5

OS command injection in Gardyn Home Kit Firmware

Priority HIGH 82

Gardyn Home Kit firmware before master.619, Home Kit Mobile Application before 2.11.0, and Home Kit Cloud API before 2.12.2026 allow command injection through vulnerable methods that do not sanitize input before passing…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02104 Published 2025-07-25 Fixed in master.619 CWE-78
TI-2025-21148 CVE-2025-29629 · GHSA-7422-rhq7-3wfj

Information disclosure in Gardyn Home Kit Firmware

Priority HIGH 74

Gardyn Home Kit firmware before master.619, Home Kit Mobile Application before 2.11.0, and Home Kit Cloud API before 2.12.2026 use weak default credentials for secure shell access.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00538 Published 2025-07-25 Fixed in master.619 CWE-1392
TI-2025-21147 CVE-2025-29628 · GHSA-82xm-jwxq-4436

Information disclosure in Gardyn Home Kit Firmware

Priority HIGH 82

A Gardyn Azure IoT Hub connection string is downloaded over an insecure HTTP connection in Gardyn Home Kit firmware before master.619, Home Kit Mobile Application before 2.11.0, and Home Kit Cloud API before 2.12.2026 le…

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.00299 Published 2025-07-25 Fixed in master.619 CWE-924