Vulnerability in Coolkit Ewelink Cloud Service

CVE-2024-7205

When the device is shared, the homepage module are before 2.19.0  in eWeLink Cloud Service allows Secondary user to take over devices as primary user via sharing unnecessary device-sensitive information.

EPSS: 0.005 (39.9th percentile) — read the EPSS interpretation.