CVE-2018-20100
02.01.2019, 18:29
An issue was discovered on August Connect devices. Insecure data transfer between the August app and August Connect during configuration allows attackers to discover home Wi-Fi credentials. This data transfer uses an unencrypted access point for these credentials, and passes them in an HTTP POST, using the AugustWifiDevice class, with data encrypted with a fixed key found obfuscated in the app.Enginsight
| Vendor | Product | Version |
|---|---|---|
| august | august_connect | - |
| august | august_connect_firmware | - |
𝑥
= Vulnerable software versions
Common Weakness Enumeration