CVE-2020-12702

Weak encryption in the Quick Pairing mode in the eWeLink mobile application (Android application V4.9.2 and earlier, iOS application V4.9.1 and earlier) allows physically proximate attackers to eavesdrop on Wi-Fi credentials and other sensitive information by monitoring the Wi-Fi spectrum during the pairing process.

CVSS v3.0 4.6 MEDIUM
CVSS v2.0 2.1 LOW

4.6^/10

CVSS v3.0 : MEDIUM

Vector :

Exploitability : 0.9 / Impact : 3.6

Attack Vector PHYSICAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://dl.acm.org/doi/abs/10.1145/3411498.3419965	Third Party Advisory
https://www.youtube.com/watch?v=DghYH7WY6iE&feature=youtu.be	Exploit Third Party Advisory
https://github.com/salgio/ESPTouchCatcher	Exploit Third Party Advisory
https://play.google.com/store/apps/details?id=com.coolkit&hl=en_US	Product Third Party Advisory

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:coolkit:ewelink::::::iphone_os::*
	cpe:2.3:a:coolkit:ewelink::::::android::*

Information

Published : 2021-02-24 06:15

Updated : 2021-07-21 04:39

NVD link : CVE-2020-12702

Mitre link : CVE-2020-12702

JSON object : View

CWE

CWE-327

Use of a Broken or Risky Cryptographic Algorithm

Advertisement

Products Affected

coolkit

ewelink

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://dl.acm.org/doi/abs/10.1145/3411498.3419965", "name": "https://dl.acm.org/doi/abs/10.1145/3411498.3419965", "tags": ["Third Party Advisory"], "refsource": "MISC"}, {"url": "https://www.youtube.com/watch?v=DghYH7WY6iE&feature=youtu.be", "name": "https://www.youtube.com/watch?v=DghYH7WY6iE&feature=youtu.be", "tags": ["Exploit", "Third Party Advisory"], "refsource": "MISC"}, {"url": "https://github.com/salgio/ESPTouchCatcher", "name": "https://github.com/salgio/ESPTouchCatcher", "tags": ["Exploit", "Third Party Advisory"], "refsource": "MISC"}, {"url": "https://play.google.com/store/apps/details?id=com.coolkit&hl=en_US", "name": "https://play.google.com/store/apps/details?id=com.coolkit&hl=en_US", "tags": ["Product", "Third Party Advisory"], "refsource": "MISC"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Weak encryption in the Quick Pairing mode in the eWeLink mobile application (Android application V4.9.2 and earlier, iOS application V4.9.1 and earlier) allows physically proximate attackers to eavesdrop on Wi-Fi credentials and other sensitive information by monitoring the Wi-Fi spectrum during the pairing process."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-327"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2020-12702", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "severity": "LOW", "acInsufInfo": false, "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}, "baseMetricV3": {"cvssV3": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.6, "attackVector": "PHYSICAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 0.9}}, "publishedDate": "2021-02-24T14:15Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:coolkit:ewelink:*:*:*:*:*:iphone_os:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "4.9.1"}, {"cpe23Uri": "cpe:2.3:a:coolkit:ewelink:*:*:*:*:*:android:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "4.9.2"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2021-07-21T11:39Z"}