CVE-2017-5249

—

CVSS 3.0

9.8 critical

EPSS

<1%p51

Published

Feb 22, 2018 (Feb 22, 2018)

Modified

Jun 17, 2026

Description

In version 6.1.0.19 and prior of Wink Labs's Wink - Smart Home Android app, the OAuth token used by the app to authorize user access is not stored in an encrypted and secure manner.

Vendors: wink
Products: wink
Weakness: CWE-922, CWE-312
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.