CVE-2024-3130

Hard-coded Credentials in CoolKit eWeLlink app are before 5.4.x on Android and IOS allows local attacker to unauthorized access to sensitive data via Decryption algorithm and key obtained after decompiling app...

PT-2024-23947

Name of the Vulnerable Software and Affected Versions CoolKit eWeLlink app versions prior to 5.4.x Description The issue concerns hard-coded credentials in the CoolKit eWeLlink app, allowing a local attacker to gain unauthorized access to sensitive data. This is achieved via a decryption algorith...

CVE-2024-3130: Use of Hard-coded Credentials

Hard-coded Credentials in CoolKit eWeLlink app are before 5.4.x on Android and IOS allows local attacker to unauthorized access to sensitive data via Decryption algorithm and key obtained after decompiling app...