| Package | Affected versions | Patched versions |
|---|---|---|
| ewelink | ≤ 4.9.1≤ 4.9.2 |
Unconstrained Web access to the device's private encryption key in the QR code pairing mode in the eWeLink mobile application (through 4.9.2 on Android and through 4.9.1 on iOS) allows a physically proximate attacker to eavesdrop on Wi-Fi credentials and other sensitive information by monitoring the Wi-Fi spectrum during a device pairing process.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free