CVE-2024-7206

SSL Pinning BypassineWeLink Some hardware productsallows local ATTACKER to Decrypt TLS communication and Extract secrets to clone the devicevia Flash the modified firmware
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
UNKNOWN
---
CoolKitCNA
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 4%
Common Weakness Enumeration
References
https://ewelink.cc/security-advisory-firmware-extraction-and-hardware-ssl-pinning-bypass/