Summaryinfo

A vulnerability classified as problematic was found in Elink Smart eSmartCam App 2.1.5 on Android. Affected by this vulnerability is an unknown functionality. The manipulation leads to hard-coded key. This vulnerability is known as CVE-2024-25731. The attack can be launched remotely. There is no exploit available. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Detailsinfo

A vulnerability classified as problematic has been found in Elink Smart eSmartCam App 2.1.5 on Android (Android App Software). Affected is some unknown functionality. The manipulation with an unknown input leads to a hard-coded key vulnerability. CWE is classifying the issue as CWE-321. The use of a hard-coded cryptographic key significantly increases the possibility that encrypted data may be recovered. This is going to have an impact on confidentiality. CVE summarizes:

The Elink Smart eSmartCam (com.cn.dq.ipc) application 2.1.5 for Android contains hardcoded AES encryption keys that can be extracted from a binary file. Thus, encryption can be defeated by an attacker who can observe packet data (e.g., over Wi-Fi).

The weakness was released 03/05/2024. The advisory is available at github.com. This vulnerability is traded as CVE-2024-25731 since 02/11/2024. The technical details are unknown and an exploit is not available. This vulnerability is assigned to T1600.001 by the MITRE ATT&CK project.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Android App Software

Vendor

• Elink

Name

• Smart eSmartCam App

Version

• 2.1.5

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion