ThroughTek

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

ThroughTek records in CISA KEV

No ThroughTek vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Kalay Platform 4 records MEDIUM Kalay P2p Software Development Kit 2 records MEDIUM

Records

2 records in Kalay P2p Software Development Kit · all components

TI-2021-12543 CVE-2021-32934 · GHSA-3v34-r58h-wm2h

ThroughTek P2P SDK - Cleartext Transmission of Sensitive Information

MEDIUM 49

The affected ThroughTek P2P products (SDKs using versions before 3.1.5, any versions with nossl tag, device firmware not using AuthKey for IOTC conneciton, firmware using AVAPI module without enabling DTLS mechanism, and…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00736 Published 2022-05-19 Fixed in firmware using AuthKey for IOTC connection CWE-319

TI-2021-09526 CVE-2021-28372 · GHSA-h5gx-r98q-mqhf

ThroughTek's Kalay Platform 2.0 network allows an attacker to impersonate an arbitrary…

MEDIUM 41

ThroughTek's Kalay Platform 2.0 network allows an attacker to impersonate an arbitrary ThroughTek (TUTK) device given a valid 20-byte uniquely assigned identifier (UID).

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.02554 Published 2021-08-17 No fix listed CWE-290

Open these records in search →

Critical	1
High	4
Medium	1
Low	0
No CVSS	0