CVE-2024-7206
Firmware extraction and Hardware SSL Pinning Bypass
- State
- Published
- Severity
- 7.0 High
- Published
- Oct 8, 2024
- Updated
- Oct 8, 2024
- Reserved
- Jul 29, 2024
Description
SSL Pinning Bypass in eWeLink Some hardware products allows local ATTACKER to Decrypt TLS communication and Extract secrets to clone the device via Flash the modified firmware
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 7.0 High | CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | CoolKit |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Zigbee Bridge ProeWeLink |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.