PT-2025-30889 · Gardyn 4 · Gardyn 4

Published 2025-07-25 · Updated 2026-02-25 · CVE-2025-29630

Positive Technologies (AI Summary)

CVSS v3.1

6.6

Medium

Base vector

AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Gardyn version 4

Description An issue in Gardyn 4 allows a remote attacker possessing the corresponding SSH private key to gain remote root access to affected devices.

Recommendations Ensure the SSH private key is securely stored and access is restricted to authorized personnel.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

CWE-321

Related Identifiers

CVE-2025-29630

Affected Products

Gardyn 4

References · 7

• 🔥 https://github.com/mselbrede/gardyn/blob/main/CVE-2025-29630.md · Exploit
• 🔥 https://github.com/kristof-mattei/gardyn-hack/blob/main/CVE-2025-29630.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-29630 · Security Note
• https://twitter.com/CVEnew/status/1948794751588991116 · Twitter Post
• http://gardyn.com · Note
• https://t.me/cveNotify/153257 · Telegram Post
• https://twitter.com/cracbot/status/1950511771011174842 · Twitter Post