CVE-2020-12702
MEDIUMeWeLink < 4.9.1 (iOS) and < 4.9.2 (Android) - Weak Encryption in Quick Pairing Mode
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2020-12702. PoCs published by salgio.
AI-analyzed exploit summary This PoC exploits CVE-2020-12702 by sniffing and decrypting Wi-Fi credentials transmitted during the eWeLink app's Quick Pairing process. It reverses the ESP Touch protocol to extract sensitive information from multicast packets.
Description
Weak encryption in the Quick Pairing mode in the eWeLink mobile application (Android application V4.9.2 and earlier, iOS application V4.9.1 and earlier) allows physically proximate attackers to eavesdrop on Wi-Fi credentials and other sensitive information by monitoring the Wi-Fi spectrum during the pairing process.
Exploits (2)
This PoC exploits CVE-2020-12702 by sniffing and decrypting Wi-Fi credentials transmitted during the eWeLink app's Quick Pairing process. It reverses the ESP Touch protocol to extract sensitive information from multicast packets.
This repository contains a detailed writeup of CVE-2021-27941, an incorrect access control vulnerability in the eWeLink mobile application that allows attackers to eavesdrop on Wi-Fi credentials during the QR code pairing process. The vulnerability arises from unconstrained access to the device's private encryption key, enabling nearby attackers to decrypt sensitive information transmitted over an open softAP WiFi network.
References (4)
Scores
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N