RSS   Vulnerabilities for 'Ewelink'   RSS

2021-05-06
 
CVE-2021-27941

CWE-863
 

 
Unconstrained Web access to the device's private encryption key in the QR code pairing mode in the eWeLink mobile application (through 4.9.2 on Android and through 4.9.1 on iOS) allows a physically proximate attacker to eavesdrop on Wi-Fi credentials and other sensitive information by monitoring the Wi-Fi spectrum during a device pairing process.

 
2021-02-24
 
CVE-2020-12702

CWE-326
 

 
Weak encryption in the Quick Pairing mode in the eWeLink mobile application (Android application V4.9.2 and earlier, iOS application V4.9.1 and earlier) allows physically proximate attackers to eavesdrop on Wi-Fi credentials and other sensitive information by monitoring the Wi-Fi spectrum during the pairing process.

 


Copyright 2024, cxsecurity.com

 

Back to Top