CVE-2019-17098lowCWE-321

CVE-2019-17098: falha de baixa gravidade em August Connect Firmware

Use of Hard-coded Cryptographic Key vulnerability in August Connect Wi-Fi Bridge App

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Connect+ Monitorar Smart Lock and Connect Wi-Fi Bridge App

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 3.5epss 0.5%
Use of hard-coded cryptographic key vulnerability in August Connect Wi-Fi Bridge App, Connect Firmware allows an attacker to decrypt an intercepted payload containing the Wi-Fi network authentication credentials. This issue affects: August Connect Wi-Fi Bridge App version v10.11.0 and prior versions on Android. August Connect Firmware version 2.2.12 and prior versions.
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Produtos afetados
August · Connect FirmwareAugust · Smart Lock and Connect Wi-Fi Bridge App