CVE-2017-5250 | BDVDB-2026-96995 Detail

InsteonInsteon for Hub

Description#

In version 1.9.7 and prior of Insteon's Insteon for Hub Android app, the OAuth token used by the app to authorize user access is not stored in an encrypted and secure manner.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-922 (Insecure Storage of Sensitive Information)

References#

https://blog.rapid7.com/2017/09/22/multiple-vulnerabilities-in-wink-and-insteon-smart-home-systems/

Exploit#

No public exploit known

History#

Version 12018-02-22Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.