Smart Garden Device Has Serious Security Flaw. Check If You Own One

The Gardyn IoT Hub, a device that manages smart indoor garden systems, has been found to have serious security vulnerabilities. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a warning about the flaws. The most serious problem is the use of hard coded credentials, which means the device has built in passwords that cannot be changed. This flaw received the maximum severity score of 10 out of

10. If you own a Gardyn smart garden system, your device could be at risk. The vulnerabilities affect Gardyn Home Firmware, Studio Firmware, and Cloud API versions below 2.12.
11. Unauthenticated users (meaning people who have not logged in at all) could potentially access and control your IoT Hub. While this might seem less serious than other hacks because it is just a garden system, remember that any connected device on your home network can be a doorway to other devices. Here is what you should do right now:
12. Check your Gardyn device to see which firmware version you are running. Look in the device settings or app.
13. If your version is below 2.12.2026, contact Gardyn customer support immediately to request an update.
14. Until you can update, consider disconnecting your Gardyn device from your network or turning it off when not in use.
15. Change your home Wi-Fi password after updating the device. This ensures anyone who may have gained access can no longer connect.
16. Review what other smart home devices you have connected to your network. Make a list so you can check for security updates regularly. Every smart home device you add to your network is another potential entry point for attackers. Before buying any connected device, research the company's track record on security updates. Choose products from companies that regularly release security patches. Keep all smart home devices on a separate Wi-Fi network from your computers and phones if possible. This limits damage if one device is compromised.