CyberSecBulletin

Elinksmart vulnerabilities

We track 2 vulnerabilities in Elinksmart products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 15, 2024.

2vulnerabilities
0critical
2high
0exploited
7.4average CVSS score

Latest Elinksmart vulnerabilities

  • 7.3 High severity

    smart_cabinet_lock: Improper Access Control

    CVE-2024-36438Elinksmart

    eLinkSmart Hidden Smart Cabinet Lock 2024-05-22 has Incorrect Access Control and fails to perform an authorization check which can lead to card duplication and other attacks.

  • 7.5 High severity

    Esmartcam: Use of Hard-coded Credentials

    CVE-2024-25731Elinksmart

    The Elink Smart eSmartCam (com.cn.dq.ipc) application 2.1.5 for Android contains hardcoded AES encryption keys that can be extracted from a binary file. Thus, encryption can be defeated by an attacker who can observe packet data (e.g., over Wi-Fi).