Medium severity4.6NVD Advisory· Published Feb 24, 2021· Updated Jun 17, 2026

CVE-2020-12702

Description

Weak encryption in the Quick Pairing mode in the eWeLink mobile application (Android application V4.9.2 and earlier, iOS application V4.9.1 and earlier) allows physically proximate attackers to eavesdrop on Wi-Fi credentials and other sensitive information by monitoring the Wi-Fi spectrum during the pairing process.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

eWeLink/eWeLink mobile applicationdescription
eWeLink/eWeLinkllm-fuzzy
Range: Android V4.9.2 and earlier, iOS V4.9.1 and earlier
CoolKit/Ewelink2 versions
cpe:2.3:a:coolkit:ewelink:*:*:*:*:*:iphone_os:*:*+ 1 more
- cpe:2.3:a:coolkit:ewelink:*:*:*:*:*:iphone_os:*:*range: <=4.9.1
- cpe:2.3:a:coolkit:ewelink:*:*:*:*:*:android:*:*range: <=4.9.2

Patches

Vulnerability mechanics

References

www.youtube.com/watchnvdExploitThird Party Advisory
dl.acm.org/doi/abs/10.1145/3411498.3419965nvdThird Party Advisory
play.google.com/store/apps/detailsnvdProductThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.299
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000