What’s Vulnerable › Vulnerabilities

CVE-2018-10825

• Severity: medium (CVSS 5.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-05-15 · updated 2026-06-17
• Weakness: CWE-287

Description

Mimo Baby 2 devices do not use authentication or encryption for the Bluetooth Low Energy (BLE) communication from a Turtle to a Lilypad, which allows attackers to inject fake information about the position and temperature of a baby via a replay or spoofing attack.

Affected products

• Mimobaby Mimo Baby 2 Firmware: all versions

References

• https://medium.com/%40victor_14768/mimo-baby-hack-ac7fa0ae3bfb
• https://medium.com/%40victor_14768/mimo-baby-hack-ac7fa0ae3bfb

Get alerted when CVE-2018-10825 or the next vulnerability affects your stack