CVE-2024-7206

Firmware extraction and Hardware SSL Pinning Bypass PUBLISHED

Description (CNA)

SSL Pinning Bypass in eWeLink Some hardware products allows local ATTACKER to Decrypt TLS communication and Extract secrets to clone the device via Flash the modified firmware

Affected (CNA)

Vendor / product	Versions
eWeLink / Zigbee Bridge Pro	affected 0 through 2.0.0

CWE

CWE-295, CWE-798

References

https://ewelink.cc/security-advisory-firmware-extraction-and-hardware-ssl-pinning-bypass/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.