What is CVE-2024-3130?

CVE-2024-3130 is a medium-severity vulnerability in Coolkit Ewelink App, classified under Use of Hard-coded Credentials. CVSS score: 5.7/10. Published 2024-04-01.

How severe is CVE-2024-3130?

Medium severity. CVSS v3 base score is 5.7 out of 10.

Vulnerability in Coolkit Ewelink App

CVE-2024-3130

Hard-coded Credentials in CoolKit eWeLlink app are before 5.4.x on Android and IOS allows local attacker to unauthorized access to sensitive data via Decryption algorithm and key obtained after decompiling app

EPSS: 0.001 (3.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.7 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N.

Affected products

Coolkit Ewelink App — versions 0

Weakness classification (CWE)

CWE-798 — Use of Hard-coded Credentials

References

68870bb1-d075-4169-957d-e580b18692b9

Frequently asked questions

What is CVE-2024-3130?: CVE-2024-3130 is a medium-severity vulnerability in Coolkit Ewelink App, classified under Use of Hard-coded Credentials. CVSS score: 5.7/10. Published 2024-04-01.
How severe is CVE-2024-3130?: Medium severity. CVSS v3 base score is 5.7 out of 10.