An issue was discovered in Lush 2 through 2020-02-25. Due to the lack of Bluetooth traffic encryption, it is possible to hijack an ongoing Bluetooth connection between the Lush 2 and a mobile phone. This allows an attacker to gain full control over the device.
a3c9d7fe9b813445303f460a981860ef365df6e220620ff212252ae3b3f0a3e7