Ewelink vulnerabilities

2 known vulnerabilities in Ewelink from CoolKIt. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.4 Critical severity

  eWeLink Cloud Service: Insertion of Sensitive Information Into Sent Data

  CVE-2024-7205Jul 31, 2024CoolKIt

  When the device is shared, the homepage module are before 2.19.0 in eWeLink Cloud Service allows Secondary user to take over devices as primary user via sharing unnecessary device-sensitive information.

• 7.7 High severity

  eWeLink - Smart Home: Authentication Bypass by Primary Weakness

  CVE-2023-6998Dec 30, 2023CoolKit Technology

  Improper privilege management vulnerability in CoolKit Technology eWeLink on Android and iOS allows application lockscreen bypass.This issue affects eWeLink before 5.2.0.