PT-2025-30897

CVE-2025-29629

Published

2025-07-25

Updated

2026-02-25

Description by

CVSS 3.1

9.1

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Gardyn Home Kit firmware versions prior to master.619 Gardyn Home Kit Mobile Application versions prior to 2.11.0 Gardyn Home Kit Cloud API versions prior to 2.12.2026 Gardyn versions prior to 4

Description The Gardyn Home Kit firmware, Mobile Application, and Cloud API use weak default credentials for secure shell access. This could allow attackers to gain access to exposed Gardyn Home Kits. An issue in Gardyn allows a remote attacker to obtain sensitive information and execute arbitrary code through the Gardyn Home component.

Recommendations Update Gardyn Home Kit firmware to version master.619 or later. Update Gardyn Home Kit Mobile Application to version 2.11.0 or later. Update Gardyn Home Kit Cloud API to version 2.12.2026 or later. Update Gardyn to version 4 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-94: Improper Control of Generation of Code (\'Code Injection\')

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CWE-1392: Use of Default Credentials

Related identifiers