Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2018-10825 Details

Description

Mimo Baby 2 devices do not use authentication or encryption for the Bluetooth Low Energy (BLE) communication from a Turtle to a Lilypad, which allows attackers to inject fake information about the position and temperature of a baby via a replay or spoofing attack.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.3 MEDIUMVector:CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://medium.com/%40victor_14768/mimo-baby-hack-ac7fa0ae3bfb CVE
https://medium.com/%40victor_14768/mimo-baby-hack-ac7fa0ae3bfb [email protected]

Weakness Enumeration

CWE-IDCWE NameSource
CWE-287Improper Authentication[email protected]
CWE-311Missing Encryption of Sensitive Data[email protected]

Affected Products

ProductVersions
mimobaby mimo baby 2 firmware
All versions

CPE

  • cpe:2.3:o:mimobaby:mimo_baby_2_firmware:-:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
mimobaby mimo baby 2
All versions

CPE

  • cpe:2.3:h:mimobaby:mimo_baby_2:-:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

6 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2018-10825
NVD Published Date:
May 15, 2018
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2018-10825 Details - Not Deferred