Description
Improper privilege management vulnerability in CoolKit Technology eWeLink on Android and iOS allows application lockscreen bypass.This issue affects eWeLink before 5.2.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CoolKit Technology | eWeLink - Smart Home | < 5.2.0 | 5.2.0 |
| CoolKit Technology | eWeLink-Smart Home | < 5.2.0 | 5.2.0 |
References
- https://cert.pl/en/posts/2023/12/CVE-2023-6998/ third-party-advisory
- https://cert.pl/posts/2023/12/CVE-2023-6998/ third-party-advisory
- https://ewelink.cc/app/ product