cvedb.io
CVE-2024-3130
MEDIUM · CVSS 5.7
EPSS exploitation probability: 0%
Published 2024-04-01T10:15:07.607 · Last modified 2026-06-17T07:43:22.280

Summary

Hard-coded Credentials in CoolKit eWeLlink app are before 5.4.x on Android and IOS allows local attacker to unauthorized access to sensitive data via Decryption algorithm and key obtained after decompiling app

Does this affect you?

Add your gear to cvedb and we'll alert you only when a vendor you run ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.