CVE-2017-5249CWE-922

CVE-2017-5249: vulnerability in Wink - Smart Home

Published · Updated

Follow this CVE+ Monitor Wink - Smart Home

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.9%
In version 6.1.0.19 and prior of Wink Labs's Wink - Smart Home Android app, the OAuth token used by the app to authorize user access is not stored in an encrypted and secure manner.
Affected products
Wink Labs Inc · Wink - Smart Home