4.6

CVE-2020-12702

Exploit
Weak encryption in the Quick Pairing mode in the eWeLink mobile application (Android application V4.9.2 and earlier, iOS application V4.9.1 and earlier) allows physically proximate attackers to eavesdrop on Wi-Fi credentials and other sensitive information by monitoring the Wi-Fi spectrum during the pairing process.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Coolkit ≫ Ewelink SwPlatformiphone_os Version <= 4.9.1
Coolkit ≫ Ewelink SwPlatformandroid Version <= 4.9.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.31% 0.22
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.6 0.9 3.6
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
CWE-327 Use of a Broken or Risky Cryptographic Algorithm

The product uses a broken or risky cryptographic algorithm or protocol.

https://dl.acm.org/doi/abs/10.1145/3411498.3419965
Third Party Advisory
https://github.com/salgio/ESPTouchCatcher
Third Party Advisory
Exploit
https://play.google.com/store/apps/details?id=com.coolkit&hl=en_US
Third Party Advisory
Product
https://www.youtube.com/watch?v=DghYH7WY6iE&feature=youtu.be
Third Party Advisory
Exploit