Filtered by vendor Coolkit
Subscriptions
Filtered by product Ewelink
Subscriptions
Total
3 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2023-6998 | 1 Coolkit | 1 Ewelink | 2024-01-11 | 7.7 High |
Improper privilege management vulnerability in CoolKit Technology eWeLink on Android and iOS allows application lockscreen bypass.This issue affects eWeLink before 5.2.0. | ||||
CVE-2021-27941 | 1 Coolkit | 1 Ewelink | 2022-07-12 | 4.6 Medium |
Unconstrained Web access to the device's private encryption key in the QR code pairing mode in the eWeLink mobile application (through 4.9.2 on Android and through 4.9.1 on iOS) allows a physically proximate attacker to eavesdrop on Wi-Fi credentials and other sensitive information by monitoring the Wi-Fi spectrum during a device pairing process. | ||||
CVE-2020-12702 | 1 Coolkit | 1 Ewelink | 2021-07-21 | 4.6 Medium |
Weak encryption in the Quick Pairing mode in the eWeLink mobile application (Android application V4.9.2 and earlier, iOS application V4.9.1 and earlier) allows physically proximate attackers to eavesdrop on Wi-Fi credentials and other sensitive information by monitoring the Wi-Fi spectrum during the pairing process. |
Page 1 of 1.