Read the docs

ThroughTek

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

ThroughTek records in CISA KEV

No ThroughTek vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Kalay Platform 4 records MEDIUM Kalay P2p Software Development Kit 2 records MEDIUM

Records

4 records in Kalay Platform · all components

TI-2023-05804 CVE-2023-6321 · GHSA-7h6w-cw39-chrh

Owlet Camera OS command injection

Priority MEDIUM 45

A command injection vulnerability exists in the IOCTL that manages OTA updates.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02748 Published 2024-05-15 Fixed in 4.2.10, 4.2.11 CWE-78
TI-2023-05805 CVE-2023-6322 · GHSA-cw8j-9ggg-f37g

Stack-based buffer overflow in message parser functionality

Priority MEDIUM 42

A stack-based buffer overflow vulnerability exists in the message parsing functionality of the Roku Indoor Camera SE version 3.0.2.4679 and Wyze Cam v3 version 4.36.11.5859.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01022 Published 2024-05-15 No fix listed CWE-121
TI-2023-05807 CVE-2023-6324 · GHSA-8xpm-gr22-c94j

ThroughTek Kalay SDK error in handling the PSK identity

Priority MEDIUM 41

ThroughTek Kalay SDK uses a predictable PSK value in the DTLS session when encountering an unexpected PSK identity

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00712 Published 2024-05-15 No fix listed CWE-457
Open these records in search →