CVE-2024-25731

—

CVSS 3.1

7.5 high

EPSS

<1%p41

Published

Mar 5, 2024 (Mar 5, 2024)

Modified

Jun 17, 2026

Description

The Elink Smart eSmartCam (com.cn.dq.ipc) application 2.1.5 for Android contains hardcoded AES encryption keys that can be extracted from a binary file. Thus, encryption can be defeated by an attacker who can observe packet data (e.g., over Wi-Fi).

Vendors: elinksmart
Products: esmartcam
Weakness: CWE-798
Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.