Vendors / Insteon Records 115 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 97 CVSS 9.0–10.0
CVSS high 17 CVSS 7.0–8.9
Exploited now Insteon records in CISA KEV No Insteon vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 43
In version 1.9.7 and prior of Insteon's Insteon for Hub Android app, the OAuth token used by the app to authorize user access is not stored in an encrypted and secure manner.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00686 · Published 2018-02-22 · No fix listed CWE-922
Open these records in search → All records by CVSS severity
Critical97 High17 Medium1 Low0 No CVSS0