What’s Vulnerable › Vulnerabilities

CVE-2024-25731

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-03-05 · updated 2026-06-17
• Weakness: CWE-798

Description

The Elink Smart eSmartCam (com.cn.dq.ipc) application 2.1.5 for Android contains hardcoded AES encryption keys that can be extracted from a binary file. Thus, encryption can be defeated by an attacker who can observe packet data (e.g., over Wi-Fi).

Affected products

• Elinksmart Esmartcam: 2.1.5

References

• https://github.com/actuator/com.cn.dq.ipc
• https://github.com/actuator/com.cn.dq.ipc/blob/main/CVE-2024-25731
• https://github.com/actuator/com.cn.dq.ipc
• https://github.com/actuator/com.cn.dq.ipc/blob/main/CVE-2024-25731

Get alerted when CVE-2024-25731 or the next vulnerability affects your stack