Gardyn Home Kit (Update A)

Risk Summary

Successful exploitation of these vulnerabilities could allow unauthenticated users to access and control edge devices, access cloud-based devices and user information without authentication, and pivot to other edge devices managed in the Gardyn cloud environment.

CVEs (10)

Remediations

• Gardyn states that the relevant fixes are included in the latest version of the Gardyn mobile application. Users are required to run a supported version of the Gardyn App on their phone in order to access Gardyn services and devices.
• The current versions of the Gardyn App and the Gardyn Home firmware can be checked in the Gardyn App.
• For all vulnerabilities, Gardyn recommends users ensure their home kit and studio devices are upgraded to firmware master.622 or later. Gardyn also recommends that users update their mobile application to the most recent version. Gardyn requests that users ensure their devices have network connectivity in order to automatically download needed firmware updates. Unconnected devices will automatically update when configured with a working Internet connection.
• Further information on Gardyn security can be found here: https://mygardyn.com/security/
• Further customer support can be obtained from Gardyn at: [email protected]

Affected Vendors

Affected Products (4)

Affected Sectors

Food and Agriculture