PT-2020-9870
CVE-2019-17098
·
تاريخ النشر
2020-09-30
·
تاريخ التحديث
2020-10-08
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
August Connect Wi-Fi Bridge App versions v10.11.0 and prior
August Connect Firmware versions 2.2.12 and prior
Description
The issue is related to the use of a hard-coded cryptographic key in the August Connect Wi-Fi Bridge App and Connect Firmware, allowing an attacker to decrypt an intercepted payload containing Wi-Fi network authentication credentials.
Recommendations
For August Connect Wi-Fi Bridge App versions v10.11.0 and prior, update to a version newer than v10.11.0 to resolve the issue.
For August Connect Firmware versions 2.2.12 and prior, update to a version newer than 2.2.12 to resolve the issue.
As a temporary workaround, consider restricting access to the Wi-Fi network to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾