LOW🇵🇱 Wersja polska

CVE-2019-17098

CVSS 3.5v3.1pub. 2020-09-30upd. 2024-11-21

Use of hard-coded cryptographic key vulnerability in August Connect Wi-Fi Bridge App, Connect Firmware allows an attacker to decrypt an intercepted payload containing the Wi-Fi network authentication credentials. This issue affects: August Connect Wi-Fi Bridge App version v10.11.0 and prior versions on Android. August Connect Firmware version 2.2.12 and prior versions.

CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

  • August Home

    APP
    August
    ≤ 10.11.0

  • August Connect Wi Fi Bridge

    HW
    August
    wszystkie wersje

  • August Connect Wi Fi Bridge Firmware

    OS
    August
    ≤ 2.2.12
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2018-20100CRITICAL9.8ten sam vendor

An issue was discovered on August Connect devices. Insecure data transfer between the August app and August Co...