SHENZHEN CoolKit Technology CO., LTD.

First CVE: Apr 1, 2024Active for: 2 years
3
CVEs Published
More CVEs Published than 9% of tracked CNAs
3.0
Avg CVEs / Year
More Avg CVEs / Year than 19% of tracked CNAs
7.4
Avg CVSS Score
Higher Avg CVSS Score than 61% of tracked CNAs
0.0%
In CISA KEV
Bottom 1%

Self-Reporting Analysis

Of all the CVEs published by SHENZHEN CoolKit Technology CO., LTD. as a CNA, 0.0% affect products that SHENZHEN CoolKit Technology CO., LTD. develops as a vendor.

100.0%
Self-reported: 0Third-party: 3

Of all the CVEs published that affect products developed by SHENZHEN CoolKit Technology CO., LTD., 0.0% are self-published by SHENZHEN CoolKit Technology CO., LTD. as a CNA.

100.0%
Self-published: 0Published by other CNAs: 3

Trends Over Time

The number and severity of CVEs published by SHENZHEN CoolKit Technology CO., LTD. over time

Volume of CVEsAvg CVSS Base Score
First CVE
Apr 1, 2024
2 years ago
Most Recent CVE
Oct 8, 2024
654 days ago

Top CVEs

All CVEs published by SHENZHEN CoolKit Technology CO., LTD. as a CNA, regardless of affected vendor or product.

3 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2024-7205CRITICAL
When the device is shared, the homepage module are before 2.19.0  in eWeLink Cloud Service allows Secondary user to take over devices as primary user via sharing unnecessary device
Jul 31, 20249.428NONO
CVE-2024-7206HIGH
SSL Pinning Bypass in eWeLink Some hardware products allows local ATTACKER to Decrypt TLS communication and Extract secrets to clone the device via Flash the modified firmware
Oct 8, 20247.021NONO
CVE-2024-3130MEDIUM
Hard-coded Credentials in CoolKit eWeLlink app are before 5.4.x on Android and IOS allows local attacker to unauthorized access to sensitive data via Decryption algorithm and key o
Apr 1, 20245.718NONO
View all 3 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs published by this CNA3 CVEs
Severity distribution among all CVEs352,231 CVEs
MediumHighCritical
Attack Vector
Local1 (33.3%)
Network1 (33.3%)
Unknown0 (0.0%)
Physical1 (33.3%)
Adjacent Network0 (0.0%)
Attack Complexity
Low2 (66.7%)
High1 (33.3%)
Unknown0 (0.0%)
User Interaction
None2 (66.7%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High1 (33.3%)
None2 (66.7%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this cna scope (3 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID published by SHENZHEN CoolKit Technology CO., LTD. as a CNA.

Media Mentions

Media articles that mention a CVE ID published by SHENZHEN CoolKit Technology CO., LTD. as a CNA — matched by CVE ID, not by organization name.

Top CWEs