← back
CVE-2021-27941

CVE-2021-27941

EPSS 0.2%
Unconstrained Web access to the device's private encryption key in the QR code pairing mode in the eWeLink mobile application (through 4.9.2 on Android and through 4.9.1 on iOS) allows a physically proximate attacker to eavesdrop on Wi-Fi credentials and other sensitive information by monitoring the Wi-Fi spectrum during a device pairing process.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://apps.apple.com/us/app/ewelink-smart-home/id1035163158https://github.com/salgio/eWeLink-QR-Codehttps://play.google.com/store/apps/details?id=com.coolkit&hl=en_US