CVE-2019-17098

Name of the Vulnerable Software and Affected Versions August Connect Wi-Fi Bridge App versions v10.11.0 and prior August Connect Firmware versions 2.2.12 and prior

Description The issue is related to the use of a hard-coded cryptographic key in the August Connect Wi-Fi Bridge App and Connect Firmware, allowing an attacker to decrypt an intercepted payload containing Wi-Fi network authentication credentials.

Recommendations For August Connect Wi-Fi Bridge App versions v10.11.0 and prior, update to a version newer than v10.11.0 to resolve the issue. For August Connect Firmware versions 2.2.12 and prior, update to a version newer than 2.2.12 to resolve the issue. As a temporary workaround, consider restricting access to the Wi-Fi network to minimize the risk of exploitation.