CoolKit: CVE Program partner

CVEs, 365 days03 all time, 0 rejected

Quality-median 99%

CVSS by the CNA-share of records

CWE-share of records

Affected versions-not n/a or unspecified

CVSS added by CISA-lower is better

Organisation	SHENZHEN CoolKit Technology CO., LTD.
Role	CNA
Type	Vendor
Reports to	mitre
Scope	Products of eWeLink Solutions only, details are available at <a href='https://ewelink.cc/our-projects-scope/' target='_blank'>https://ewelink.cc/our-projects-scope/</a>.
Advisories	https://ewelink.cc/security-advisories-and-notices/

CVE-2024-7206 2024-10-08 · CVSS 7.0
SSL Pinning Bypass in eWeLink Some hardware products allows local ATTACKER to Decrypt TLS communication and Extract secrets to clone the device via Flash the mo
CVE-2024-7205 2024-07-31 · CVSS 9.4
When the device is shared, the homepage module are before 2.19.0 in eWeLink Cloud Service allows Secondary user to take over devices as primary user via sharin
CVE-2024-3130 2024-04-01 · CVSS 5.7
Hard-coded Credentials in CoolKit eWeLlink app are before 5.4.x on Android and IOS allows local attacker to unauthorized access to sensitive data via Decryption

CoolKit