Gardyn IoT Hub
2026-07-02T19:23:29Z•453648c41e859fe5e3f32e2a63294ec0c7cef5148ba3169bcf472b2f7348f0ba
authentication-bypasscisacommand-injectioncubespacedenial-of-servicefirmwaregardynhard-coded-credentialsicsimproper-signature-verificationiotiothubototapath-normalizationprivileged-keysremote-code-executionschneider-electric','frangoteam','mitsubishi-electricsql-injectionst-engineering-idirectstoneflyvendor-advisoryxml-external-entityxssxxe
What happened
CISA ICS advisories covering multiple vendors (Gardyn, StoneFly, ST Engineering iDirect, CubeSpace, Schneider Electric, Frangoteam, Mitsubishi Electric) disclose high-impact vulnerabilities affecting IoT/OT devices and management software. Issues include exposed privileged IoT Hub keys and hard-coded credentials (allowing device takeover), improper signature verification enabling arbitrary firmware installation, XXE leading to file disclosure, authentication bypass via path normalization, SQL/OS command injection, XSS, and other RCE/DoS vectors. Several vulnerabilities are rated CVSSv3 10.0—t*
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cisa_ics_advisories
- Record identifier
- 453648c41e859fe5e3f32e2a63294ec0c7cef5148ba3169bcf472b2f7348f0ba
- Enrichment time
- 2026-07-02T19:23:29Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.