CVE-2020-11921: An issue was discovered in Lush 2 through 2020-02-25.

Security readout for executives and security teams

CVE-2020-11921 describes a Bluetooth security weakness in Lush 2 devices through 2020-02-25. Because Bluetooth traffic was reportedly not encrypted, a nearby attacker could take over an active phone-to-device connection and control the device. The sources do not identify a confirmed patch, vendor advisory, or active exploitation. Exposure is likely limited to environments where Lush 2 devices from the affected period are used within Bluetooth range of an attacker. Enterprise exposure is probably low unless these devices exist in managed spaces, labs, clinics, or employee environments covered by security policy. Treat this as a high-impact but proximity-limited issue. Priority is highest where the device is used in sensitive, shared, clinical, or managed environments. For typical enterprise networks, urgency depends on whether the device is present and in scope. Mitigation focus: Check current vendor guidance for firmware, app, or product replacement advice.; Disable Bluetooth and power off affected devices when not actively needed.; Avoid using affected devices in untrusted public or shared radio environments..

Prepared

May 18, 2026, 22:21 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.