What’s Vulnerable › Vulnerabilities
CVE-2024-7206: Firmware extraction and Hardware SSL Pinning Bypass
- Severity: high (CVSS 7.0 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-10-08 · updated 2026-06-17
- Weakness: CWE-295
Description
SSL Pinning Bypass in eWeLink Some hardware products allows local ATTACKER to Decrypt TLS communication and Extract secrets to clone the device via Flash the modified firmware
Affected products
- eWeLink Zigbee Bridge Pro: through 2.0.0
References
Get alerted when CVE-2024-7206 or the next vulnerability affects your stack