CVE-2021-27941

Unconstrained Web access to the device's private encryption key in the QR code pairing mode in the eWeLink mobile application through 4.9.2 on Android and through 4.9.1 on iOS allows a physically proximate attacker to eavesdrop on Wi-Fi credentials and other sensitive information by monitoring th...

CVE-2020-12702

Weak encryption in the Quick Pairing mode in the eWeLink mobile application Android application V4.9.2 and earlier, iOS application V4.9.1 and earlier allows physically proximate attackers to eavesdrop on Wi-Fi credentials and other sensitive information by monitoring the Wi-Fi spectrum during th...

PT-2021-17681

Name of the Vulnerable Software and Affected Versions: eWeLink mobile application versions 4.9.2 and earlier on Android eWeLink mobile application versions 4.9.1 and earlier on iOS Description: The issue allows a physically proximate attacker to eavesdrop on Wi-Fi credentials and other sensitive...

CVE-2021-27941: Insufficiently Protected Credentials

Unconstrained Web access to the device's private encryption key in the QR code pairing mode in the eWeLink mobile application through 4.9.2 on Android and through 4.9.1 on iOS allows a physically proximate attacker to eavesdrop on Wi-Fi credentials and other sensitive information by monitoring th...

PT-2021-9466

Name of the Vulnerable Software and Affected Versions eWeLink mobile application versions 4.9.2 and earlier Android eWeLink mobile application versions 4.9.1 and earlier iOS Description Weak encryption in the Quick Pairing mode allows physically proximate attackers to eavesdrop on Wi-Fi credentia...