cve.bz

CVE-2024-7206

7.0 highEPSS 0.2%

High (7.0). EPSS 0.2% chance of exploitation in the next 30 days.

SSL Pinning Bypass in eWeLink Some hardware products allows local ATTACKER to Decrypt TLS communication and Extract secrets to clone the device via Flash the modified firmware

Severity

CVSS 4.0

7.0 high
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.2% chance of exploitation in the next 30 days; higher than 14% of CVEs (scores of 2026-10-31)
CWEs
CWE-295, CWE-798
Published
Modified
Record from
the NVD, synced

References

Check your stackJSON