CVE-2019-17098

Use of hard-coded cryptographic key vulnerability in August Connect Wi-Fi Bridge App, Connect Firmware allows an attacker to decrypt an intercepted payload containing the Wi-Fi network authentication credentials. This issue affects: August Connect Wi-Fi Bridge App version v10.11.0 and prior versions on Android. August Connect Firmware version 2.2.12 and prior versions.

• CWE-321
• CWE-798

• https://labs.bitdefender.com/2020/08/smart-locks-not-so-smart-with-wi-fi-security/Third Party Advisory
• https://labs.bitdefender.com/2020/08/smart-locks-not-so-smart-with-wi-fi-security/Third Party Advisory

Published

Sep 30, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-17091faces/context/PartialViewContextImpl.java in Eclipse Mojarra…6.1
• CVE-2019-17092An XSS vulnerability in project list in OpenProject before 9…6.1
• CVE-2019-17093An issue was discovered in Avast antivirus before 19.8 and A…7.8
• CVE-2019-17094A Stack-based Buffer Overflow vulnerability in libbelkin_api…7.8
• CVE-2019-17095A command injection vulnerability has been discovered in the…9.8
• CVE-2019-17096A OS Command Injection vulnerability in the bootstrap stage …9.8
• CVE-2019-17099An Untrusted Search Path vulnerability in EPSecurityService.…7.8
• CVE-2019-1710A vulnerability in the sysadmin virtual machine (VM) on Cisc…9.8
• CVE-2019-17100An Untrusted Search Path vulnerability in bdserviceshost.exe…6.5
• CVE-2019-17101Improper Neutralization of Special Elements used in a Comman…6.7
• CVE-2019-17102An exploitable command execution vulnerability exists in the…8.1
• CVE-2019-17103An Incorrect Default Permissions vulnerability in the BDLDae…5.5