What is CVE-2018-10825?

CVE-2018-10825 is a medium-severity vulnerability in Mimobaby Mimo Baby 2, classified under Improper Authentication. CVSS score: 5.3/10. Published 2018-05-15.

How severe is CVE-2018-10825?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Auth bypass in Mimobaby Mimo Baby 2

CVE-2018-10825

Mimo Baby 2 devices do not use authentication or encryption for the Bluetooth Low Energy (BLE) communication from a Turtle to a Lilypad, which allows attackers to inject fake information about the position and temperature of a baby via a replay or spoofing attack.

Vulnerability class: Broken Authentication

EPSS: 0.002 (9.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N.

Affected products

Mimobaby Mimo_baby_2
Mimobaby Mimo_baby_2_firmware
N/a — versions n/a

Weakness classification (CWE)

CWE-287 — Improper Authentication
CWE-311 — Missing Encryption of Sensitive Data

References

cve@mitre.org (x_refsource_MISC)

Frequently asked questions

What is CVE-2018-10825?: CVE-2018-10825 is a medium-severity vulnerability in Mimobaby Mimo Baby 2, classified under Improper Authentication. CVSS score: 5.3/10. Published 2018-05-15.
How severe is CVE-2018-10825?: Medium severity. CVSS v3 base score is 5.3 out of 10.