CoolKIt

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

CoolKIt records in CISA KEV

No CoolKIt vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ewelink 3 records LOW

Records

3 records in Ewelink · all components

TI-2023-06397 CVE-2023-6998 · GHSA-cxq4-8ff4-35jm

Lockscreen bypass in eWeLink App

LOW 33

Improper privilege management vulnerability in CoolKit Technology eWeLink on Android and iOS allows application lockscreen bypass.This issue affects eWeLink before 5.2.0.

CVSS 3.1HIGH 7.7 Local No auth No interaction EPSS 0.00238 Published 2023-12-30 Fixed in 5.2.0 CWE-305

TI-2021-09269 CVE-2021-27941 · GHSA-qrrq-x7wc-w5x9

Unconstrained Web access to the device's private encryption key in the QR code pairing…

LOW 21

Unconstrained Web access to the device's private encryption key in the QR code pairing mode in the eWeLink mobile application (through 4.9.2 on Android and through 4.9.1 on iOS) allows a physically proximate attacker to…

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00214 Published 2021-05-06 No fix listed CWE-522

TI-2020-10100 CVE-2020-12702 · GHSA-4hq8-rhcf-fxwv

Weak encryption in the Quick Pairing mode in the eWeLink mobile application (Android…

LOW 21

Weak encryption in the Quick Pairing mode in the eWeLink mobile application (Android application V4.9.2 and earlier, iOS application V4.9.1 and earlier) allows physically proximate attackers to eavesdrop on Wi-Fi credent…

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00306 Published 2021-02-24 No fix listed CWE-327

Open these records in search →

Critical	1
High	1
Medium	3
Low	0
No CVSS	0