Lucene search

[email protected]CVE-2019-17098

HistorySep 30, 2020 - 1:15 p.m.

CVE-2019-17098

2020-09-3013:15:12

CWE-798

CWE-321

[email protected]

web.nvd.nist.gov

august connect

wi-fi bridge

cve-2019-17098

vulnerability

security

nvd

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.6 Medium

AI Score

Confidence

High

3.3 Low

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

30.6%

JSON

Use of hard-coded cryptographic key vulnerability in August Connect Wi-Fi Bridge App, Connect Firmware allows an attacker to decrypt an intercepted payload containing the Wi-Fi network authentication credentials. This issue affects: August Connect Wi-Fi Bridge App version v10.11.0 and prior versions on Android. August Connect Firmware version 2.2.12 and prior versions.

Affected configurations

NVD

Node

augustaugust_homeRange≤10.11.0android

Node

augustconnect_wi-fi_bridge_firmwareRange≤2.2.12

AND

augustconnect_wi-fi_bridgeMatch-

CPENameOperatorVersion
august:august_homeaugust august homele10.11.0

CPE	Name	Operator	Version
august:august_home	august august home	le	10.11.0

CNA Affected

[
  {
    "platforms": [
      "Android"
    ],
    "product": "Smart Lock and Connect Wi-Fi Bridge App",
    "vendor": "August",
    "versions": [
      {
        "lessThanOrEqual": "v10.11.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Connect Firmware",
    "vendor": "August",
    "versions": [
      {
        "lessThanOrEqual": "2.2.12",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

labs.bitdefender.com/2020/08/smart-locks-not-so-smart-with-wi-fi-security/

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.6 Medium

AI Score

Confidence

High

3.3 Low

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

30.6%

JSON

Related for CVE-2019-17098

prion1 cvelist1 nvd1