You do not have permission to edit this page, for the following reasons:
Please note that you are now editing the latest revision of this page, which is not the approved one shown by default.
==Device Overview== * Manufacturer: August Home * Model Number: August Smart Lock Pro * Firmware Versions affected: 7.2.1 and earlier * Use-case: Bluetooth + Wi-Fi enabled smart deadbolt, remote unlock, guest access code management. ==Vulnerabilities & Attack Surface== * CVE ID: CVE-2019-15062 * Vulnerability description: Bluetooth communication uses insufficiently authenticated commands. Nearby attackers can replay unlock signals under certain conditions. * Attack vector: Bluetooth radio proximity. ==CIA Triad Impact Analysis== * Confidentiality: Attackers may capture unlock command traces and access event logs. * Integrity: Replayed commands can trigger unauthorized door unlocking. * Availability: Continuous Bluetooth spam packets can jam the lock’s radio module. ==Mitigations / Countermeasures== * 1. Install the newest firmware patch from August. * 2. Remove unused guest access codes regularly. * 3. Keep the lock’s Bluetooth range physically constrained. * 4. Enable account two-factor authentication in the mobile app. ==References== [1] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15062 [2] August security release note
For new submissions, pages will appear blank until approval.
Summary: This is a minor edit Watch this page
Save page Show preview Show changes Cancel
