CVE-2018-20100

An issue was discovered on August Connect devices. Insecure data transfer between the August app and August Connect during configuration allows attackers to discover home Wi-Fi credentials. This data transfer uses an unencrypted access point for these credentials, and passes them in an HTTP POST, using the AugustWifiDevice class, with data encrypted with a fixed key found obfuscated in the app.

• CWE-311

• https://dojo.bullguard.com/dojo-by-bullguard/blog/august-connect/Third Party Advisory
• https://dojo.bullguard.com/dojo-by-bullguard/blog/august-connect/Third Party Advisory

Published

Jan 2, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-20094An issue was discovered in XXL-CONF 1.6.0. There is a path t…
• CVE-2018-20095An issue was discovered in EnsureCapacity in Core/Ap4Array.h…
• CVE-2018-20096There is a heap-based buffer over-read in the Exiv2::tEXtToD…
• CVE-2018-20097There is a SEGV in Exiv2::Internal::TiffParserWorker::findPr…6.5
• CVE-2018-20098There is a heap-based buffer over-read in Exiv2::Jp2Image::e…
• CVE-2018-20099There is an infinite loop in Exiv2::Jp2Image::encodeJp2Heade…
• CVE-2018-20101The codection "Import users from CSV with meta" plugin befor…
• CVE-2018-20102An out-of-bounds read in dns_validate_dns_response in dns.c …
• CVE-2018-20103An issue was discovered in dns.c in HAProxy through 1.8.14. …
• CVE-2018-20104Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-20105A Inclusion of Sensitive Information in Log Files vulnerabil…5.5
• CVE-2018-20106In yast2-printer up to and including version 4.0.2 the SMB p…6.5