CVE-2023-6998

HighCVSS 7.7/10Last modified Jun 17, 2026

Description

Improper privilege management vulnerability in CoolKit Technology eWeLink on Android and iOS allows application lockscreen bypass.This issue affects eWeLink before 5.2.0.

Metrics

CVSS 3.1 7.7/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-305

Affected software

Vendor	Product	Versions
CoolKit Technology	eWeLink - Smart Home	< 5.2.0
CoolKit Technology	eWeLink-Smart Home	< 5.2.0

References

https://cert.pl/en/posts/2023/12/CVE-2023-6998/Third Party Advisory
https://cert.pl/posts/2023/12/CVE-2023-6998/Third Party Advisory
https://ewelink.cc/app/Product
https://cert.pl/en/posts/2023/12/CVE-2023-6998/Third Party Advisory
https://cert.pl/posts/2023/12/CVE-2023-6998/Third Party Advisory
https://ewelink.cc/app/Product

Timeline

Published: Dec 30, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-69998.8The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Remote Code Exxecution via shortcode in all versions up to,CVE-2023-70027.2The Backup Migration plugin for WordPress is vulnerable to OS Command Injection in all versions up to, and including, 1.3.9 via the 'url' p CVE-2023-70036.8The AES key utilized in the pairing process between a lock using Sciener firmware and a wireless keypad is not unique, and can be reused to CVE-2023-70046.5The TTLock App does not employ proper verification procedures to ensure that it is communicating with the expected device, allowing for conn CVE-2023-70057.5A specially crafted message can be sent to the TTLock App that downgrades the encryption protocol used for communication, and can be utilize CVE-2023-70069.1The unlockKey character in a lock using Sciener firmware can be brute forced through repeated challenge requests, compromising the locks int CVE-2023-70078.2Sciener server does not validate connection requests from the GatewayG2, allowing an impersonation attack that provides the attacker the unl CVE-2023-70085.9A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when th CVE-2023-70098.2Some Sciener-based locks support plaintext message processing over Bluetooth Low Energy, allowing unencrypted malicious commands to be passe CVE-2023-70108.8Use after free in WebRTC in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to potentially exploit heap corruption via a craf CVE-2023-70116.5Inappropriate implementation in Picture in Picture in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to spoof the contents CVE-2023-70129.6Insufficient data validation in Permission Prompts in Google Chrome prior to 117.0.5938.62 allowed an attacker who convinced a user to insta