CVE-2024-7206

Oct. 10, 2024, 12:56 p.m.

None
No Score

Description

SSL Pinning Bypass in eWeLink Some hardware products allows local ATTACKER to Decrypt TLS communication and Extract secrets to clone the device via Flash the modified firmware

Product(s) Impacted

Product Versions
eWeLink

Weaknesses

CWE-295
Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.

References

https://ewelink.cc/security-advisory-firmware-extraction-and-hardware-ssl-pinning-bypass/

Tags

CWE-295
68870bb1-d075-4169-957d-e580b18692b9
2024-10-08
CVE-2024-7206

Date

  • Published: Oct. 8, 2024, 7:15 a.m.
  • Last Modified: Oct. 10, 2024, 12:56 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

68870bb1-d075-4169-957d-e580b18692b9

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.