CVE-2020-11925

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2021-04-02 · updated 2026-06-17
Weakness: CWE-522

Description

An issue was discovered in Luvion Grand Elite 3 Connect through 2020-02-25. Authentication to the device is based on a username and password. The root credentials are the same across all devices of this model.

Affected products

Luvion Grand Elite 3 Connect Firmware: through 2020-02-25

References

http://seclists.org/fulldisclosure/2024/Jul/14
https://www.eurofins-cybersecurity.com/news/connected-devices-baby-monitor/
http://seclists.org/fulldisclosure/2024/Jul/14
https://www.eurofins-cybersecurity.com/news/connected-devices-baby-monitor/

Get alerted when CVE-2020-11925 or the next vulnerability affects your stack