august vulnerabilities

Products

• august connect 1
• august connect firmware 1
• august home 1
• Connect Firmware 1
• connect wi-fi bridge firmware 1
• Smart Lock and Connect Wi-Fi Bridge App 1

Latest august CVEs

Newest publication first

1. CVE-2019-17098 Use of Hard-coded Cryptographic Key vulnerability in August Connect Wi-Fi Bridge App

   Published 2020-09-30

   Medium·CVSS 6.5

   Use of hard-coded cryptographic key vulnerability in August Connect Wi-Fi Bridge App, Connect Firmware allows an attacker to decrypt an intercepted payload containing the Wi-Fi network authentication credentials. This issue affects: August Connect Wi-Fi Bridge App version v10.11....

2. CVE-2018-20100 An issue was discovered on August Connect devices. Insecure data transfer between the August app and August Connect during configuration allows attackers to discover home Wi-Fi credentials. This data....

   Published 2019-01-02

   Critical·CVSS 9.8

   An issue was discovered on August Connect devices. Insecure data transfer between the August app and August Connect during configuration allows attackers to discover home Wi-Fi credentials. This data transfer uses an unencrypted access point for these credentials, and passes them...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.