CVE-2020-12702

Weak encryption in the Quick Pairing mode in the eWeLink mobile application (Android application V4.9.2 and earlier, iOS application V4.9.1 and earlier) allows physically proximate attackers to eavesdrop on Wi-Fi credentials and other sensitive information by monitoring the Wi-Fi spectrum during the pairing process.

CVSS v3 4.6 MEDIUM
CVSS v2.0 2.1 LOW

4.6^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.9 / Impact : 3.6

Attack Vector PHYSICAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://dl.acm.org/doi/abs/10.1145/3411498.3419965	Third Party Advisory
https://github.com/salgio/ESPTouchCatcher	Exploit Third Party Advisory
https://play.google.com/store/apps/details?id=com.coolkit&hl=en_US	Product Third Party Advisory
https://www.youtube.com/watch?v=DghYH7WY6iE&feature=youtu.be	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:coolkit:ewelink::::::iphone_os::*
	cpe:2.3:a:coolkit:ewelink::::::android::*

History

No history.

Information

Published : 2021-02-24 14:15

Updated : 2024-02-28 18:08

NVD link : CVE-2020-12702

Mitre link : CVE-2020-12702

CVE.ORG link : CVE-2020-12702

JSON object : View

Products Affected

coolkit

ewelink

CWE

CWE-327

Use of a Broken or Risky Cryptographic Algorithm

{"id": "CVE-2020-12702", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.6, "attackVector": "PHYSICAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 0.9}]}, "published": "2021-02-24T14:15:13.150", "references": [{"url": "https://dl.acm.org/doi/abs/10.1145/3411498.3419965", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/salgio/ESPTouchCatcher", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://play.google.com/store/apps/details?id=com.coolkit&hl=en_US", "tags": ["Product", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.youtube.com/watch?v=DghYH7WY6iE&feature=youtu.be", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-327"}]}], "descriptions": [{"lang": "en", "value": "Weak encryption in the Quick Pairing mode in the eWeLink mobile application (Android application V4.9.2 and earlier, iOS application V4.9.1 and earlier) allows physically proximate attackers to eavesdrop on Wi-Fi credentials and other sensitive information by monitoring the Wi-Fi spectrum during the pairing process."}, {"lang": "es", "value": "Un cifrado d\u00e9bil en el modo Quick Pairing en la aplicaci\u00f3n m\u00f3vil eWeLink (aplicaci\u00f3n Android versiones V4.9.2 y anteriores, aplicaci\u00f3n iOS versiones V4.9.1 y anteriores), permite a atacantes pr\u00f3ximos f\u00edsicamente espiar las credenciales de Wi-Fi y otra informaci\u00f3n confidencial al monitorear el espectro Wi-Fi durante el proceso de emparejamiento"}], "lastModified": "2021-07-21T11:39:23.747", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:coolkit:ewelink:*:*:*:*:*:iphone_os:*:*", "vulnerable": true, "matchCriteriaId": "3C19C39C-9C55-4C57-8BF2-C32E843249E5", "versionEndIncluding": "4.9.1"}, {"criteria": "cpe:2.3:a:coolkit:ewelink:*:*:*:*:*:android:*:*", "vulnerable": true, "matchCriteriaId": "6198F9C4-23C8-46B3-9100-B96C60407F1C", "versionEndIncluding": "4.9.2"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}