Ewelink

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-6998 Dec 30, 19:15 HIGH This Week

Improper privilege management vulnerability in CoolKit Technology eWeLink on Android and iOS allows application lockscreen bypass.2.0. Rated high severity (CVSS 7.7), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Google Apple Ewelink Coolkit

NVD

CVSS 3.1

7.7

EPSS

0.2%

CVE-2021-27941 May 06, 21:15 MEDIUM This Month

Unconstrained Web access to the device's private encryption key in the QR code pairing mode in the eWeLink mobile application (through 4.9.2 on Android and through 4.9.1 on iOS) allows a physically. Rated medium severity (CVSS 4.6), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Google Ewelink Coolkit

NVD GitHub

CVSS 3.1

4.6

EPSS

0.2%

CVE-2023-6998

EPSS 0% CVSS 7.7

HIGH This Week

Authentication Bypass Google Apple +2

NVD

CVE-2021-27941

EPSS 0% CVSS 4.6

MEDIUM This Month

Information Disclosure Google Ewelink +1

NVD GitHub