Vulnerabilities

TI-2023-06397 CVE-2023-6998 · GHSA-cxq4-8ff4-35jm

Lockscreen bypass in eWeLink App

LOW 33

Improper privilege management vulnerability in CoolKit Technology eWeLink on Android and iOS allows application lockscreen bypass.This issue affects eWeLink before 5.2.0.

CVSS 3.1HIGH 7.7 Local No auth No interaction EPSS 0.00238 Published 2023-12-30 Fixed in 5.2.0 CWE-305

TI-2021-09269 CVE-2021-27941 · GHSA-qrrq-x7wc-w5x9

Unconstrained Web access to the device's private encryption key in the QR code pairing…

LOW 21

Unconstrained Web access to the device's private encryption key in the QR code pairing mode in the eWeLink mobile application (through 4.9.2 on Android and through 4.9.1 on iOS) allows a physically proximate attacker to…

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00214 Published 2021-05-06 No fix listed CWE-522

TI-2020-10100 CVE-2020-12702 · GHSA-4hq8-rhcf-fxwv

Weak encryption in the Quick Pairing mode in the eWeLink mobile application (Android…

LOW 21

Weak encryption in the Quick Pairing mode in the eWeLink mobile application (Android application V4.9.2 and earlier, iOS application V4.9.1 and earlier) allows physically proximate attackers to eavesdrop on Wi-Fi credent…

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00306 Published 2021-02-24 No fix listed CWE-327

Vulnerabilities

Filters

Lockscreen bypass in eWeLink App

Unconstrained Web access to the device's private encryption key in the QR code pairing…

Weak encryption in the Quick Pairing mode in the eWeLink mobile application (Android…