CVE-2020-12702 | BDVDB-2026-149592 Detail

Description#

Weak encryption in the Quick Pairing mode in the eWeLink mobile application (Android application V4.9.2 and earlier, iOS application V4.9.1 and earlier) allows physically proximate attackers to eavesdrop on Wi-Fi credentials and other sensitive information by monitoring the Wi-Fi spectrum during the pairing process.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://play.google.com/store/apps/details?id=com.coolkit&hl=en_US
https://dl.acm.org/doi/abs/10.1145/3411498.3419965
https://github.com/salgio/ESPTouchCatcher
https://www.youtube.com/watch?v=DghYH7WY6iE&feature=youtu.be

Exploit#

No public exploit known

History#

Version 12021-02-24Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.