Read the docs

CoolKIt

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

CoolKIt records in CISA KEV

No CoolKIt vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ewelink 3 records LOW

Records

5 records

TI-2024-06672 CVE-2024-7205 · GHSA-mc3m-jxj9-pp7c

sharing unnecessary device-sensitive information allows Secondary user able to take over devices as primary user

Priority MEDIUM 43

When the device is shared, the homepage module are before 2.19.0 in eWeLink Cloud Service allows Secondary user to take over devices as primary user via sharing unnecessary device-sensitive information.

CVSS 4.0CRITICAL 9.4 Network No auth User interaction EPSS 0.00498 Published 2024-07-31 Fixed in 2.19.0 CWE-201
TI-2023-06397 CVE-2023-6998 · GHSA-cxq4-8ff4-35jm

Lockscreen bypass in eWeLink App

Priority LOW 33

Improper privilege management vulnerability in CoolKit Technology eWeLink on Android and iOS allows application lockscreen bypass.This issue affects eWeLink before 5.2.0.

CVSS 3.1HIGH 7.7 Local No auth No interaction EPSS 0.00238 Published 2023-12-30 Fixed in 5.2.0 CWE-305
TI-2024-02932 CVE-2024-3130 · GHSA-7fcw-hqq7-pqmf

Insecure Data Storage leading to sensitive Information disclosure.

Priority LOW 27

Hard-coded Credentials in CoolKit eWeLlink app are before 5.4.x on Android and IOS allows local attacker to unauthorized access to sensitive data via Decryption algorithm and key obtained after decompiling app

CVSS 3.1MEDIUM 5.7 Local High privileges No interaction EPSS 0.00135 Published 2024-04-01 Fixed in 5.4.x CWE-798
Open these records in search →