CoolKIt vulnerabilities
We track 2 vulnerabilities in CoolKIt products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 31, 2024.
2vulnerabilities
1critical
1high
0exploited
8.6average CVSS score
Latest CoolKIt vulnerabilities
- 9.4 Critical severity
eWeLink Cloud Service: Insertion of Sensitive Information Into Sent Data
When the device is shared, the homepage module are before 2.19.0 in eWeLink Cloud Service allows Secondary user to take over devices as primary user via sharing unnecessary device-sensitive information.
- 7.7 High severity
eWeLink - Smart Home: Authentication Bypass by Primary Weakness
Improper privilege management vulnerability in CoolKit Technology eWeLink on Android and iOS allows application lockscreen bypass.This issue affects eWeLink before 5.2.0.