CVSS 3.0
9.8 criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2017-5250
Critical (9.8) in insteon insteon for hub. EPSS 0.7% chance of exploitation in the next 30 days.
In version 1.9.7 and prior of Insteon's Insteon for Hub Android app, the OAuth token used by the app to authorize user access is not stored in an encrypted and secure manner.
Severity
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-312, CWE-922
- Published
- Modified
- Record from
- the NVD, synced
Affected
- insteon:insteon_for_hub