Lucene search

CVE-2020-12702

🗓️ 24 Feb 2021 14:13:15Reported by mitreType

Weak encryption in Quick Pairing mode in eWeLink app (Android V4.9.2 & earlier, iOS V4.9.1 & earlier) allows eavesdropping on Wi-Fi credentials

Reporter	Title	Published	Views	Family All 4
GithubExploit	Exploit for Use of a Broken or Risky Cryptographic Algorithm in Coolkit Ewelink	11 Jan 202013:15	–	githubexploit
Cvelist	CVE-2020-12702	24 Feb 202113:58	–	cvelist
Prion	Code injection	24 Feb 202114:15	–	prion
NVD	CVE-2020-12702	24 Feb 202114:15	–	nvd

Nvd

Node

coolkit ewelinkRange≤4.9.1iphone_os

coolkit ewelinkRange≤4.9.2android

Source	Link
dl	www.dl.acm.org/doi/abs/10.1145/3411498.3419965
youtube	www.youtube.com/watch
play	www.play.google.com/store/apps/details
github	www.github.com/salgio/ESPTouchCatcher

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 Feb 2021 14:15Current

4.2Medium risk

Vulners AI Score4.2

CVSS22.1

CVSS34.6

EPSS0.03035

CWE-327