Description

The Azure Blob Storage container used for Gardyn device logs is publicly listable without authentication. A malicious user would be able to access any device log file available in the blob storage container.

Severity (CVSS)

Base score6.9
SeverityMedium
VersionCVSS 4.0
VectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:L
Provided byCNA

Weaknesses

  • CWE-497 — CWE-497

Affected products

VendorProductVersions
GardynGardyn Home Firmware0 to <master.627
GardynGardyn Studio Firmware0 to <master.627
GardynGardyn Cloud API0 to <2.12.2026

References

Authoritative sources

This page is a snapshot. For the latest enrichment and updates, view the record on CVE.org or the NVD.

Generated from the official CVE List on 03 Jul 2026 07:05 UTC.