CVE-2023-6998CWE-305

Lockscreen bypass in eWeLink App

High · published December 30, 2023

CVSS v3.1
7.7
EPSS
0%
Percentile
14.0
In the wild
Unconfirmed
What it is

Improper privilege management vulnerability in CoolKit Technology eWeLink on Android and iOS allows application lockscreen bypass.This issue affects eWeLink before 5.2.0.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00238 · 14.0th percentile
Weakness
CWE-305 · Authentication Bypass by Primary Weakness
Published
2023-12-30T18:32Z
EPSS history
Timeline
  • 30 DEC 18:32Z
    Lockscreen bypass in eWeLink App
    cvelistv5