CVE-2017-5250

2018-02-2216:00:00

CWE-922

rapid7

www.cve.org

AI Score

9.3

Confidence

High

EPSS

0.002

Percentile

60.7%

JSON

In version 1.9.7 and prior of Insteon’s Insteon for Hub Android app, the OAuth token used by the app to authorize user access is not stored in an encrypted and secure manner.

CNA Affected

[
  {
    "product": "Insteon for Hub",
    "vendor": "Insteon",
    "versions": [
      {
        "status": "affected",
        "version": "1.9.7"
      }
    ]
  }
]