Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: CoolKIt Clear all filters
TI-2024-06672 CVE-2024-7205 · GHSA-mc3m-jxj9-pp7c

sharing unnecessary device-sensitive information allows Secondary user able to take over devices as primary user

Priority MEDIUM 43

When the device is shared, the homepage module are before 2.19.0 in eWeLink Cloud Service allows Secondary user to take over devices as primary user via sharing unnecessary device-sensitive information.

CVSS 4.0CRITICAL 9.4 Network No auth User interaction EPSS 0.00498 Published 2024-07-31 Fixed in 2.19.0 CWE-201
TI-2024-02932 CVE-2024-3130 · GHSA-7fcw-hqq7-pqmf

Insecure Data Storage leading to sensitive Information disclosure.

Priority LOW 27

Hard-coded Credentials in CoolKit eWeLlink app are before 5.4.x on Android and IOS allows local attacker to unauthorized access to sensitive data via Decryption algorithm and key obtained after decompiling app

CVSS 3.1MEDIUM 5.7 Local High privileges No interaction EPSS 0.00135 Published 2024-04-01 Fixed in 5.4.x CWE-798
TI-2023-06397 CVE-2023-6998 · GHSA-cxq4-8ff4-35jm

Lockscreen bypass in eWeLink App

Priority LOW 33

Improper privilege management vulnerability in CoolKit Technology eWeLink on Android and iOS allows application lockscreen bypass.This issue affects eWeLink before 5.2.0.

CVSS 3.1HIGH 7.7 Local No auth No interaction EPSS 0.00238 Published 2023-12-30 Fixed in 5.2.0 CWE-305