ZeroHour

CVE-2019-17098

CVSS 3.1
6.5 medium
EPSS
<1%p41
Published
()
Modified
Description

Use of hard-coded cryptographic key vulnerability in August Connect Wi-Fi Bridge App, Connect Firmware allows an attacker to decrypt an intercepted payload containing the Wi-Fi network authentication credentials. This issue affects: August Connect Wi-Fi Bridge App version v10.11.0 and prior versions on Android. August Connect Firmware version 2.2.12 and prior versions.

Vendors
august
Products
august home, connect wi-fi bridge firmware
Weakness
CWE-321, CWE-798
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

In the news

No ingested article mentions this CVE yet.