Read the docs
TI-2023-05807 Aliases CVE-2023-6324GHSA-8xpm-gr22-c94j

ThroughTek Kalay SDK error in handling the PSK identity

Priority MEDIUM 41CWE-457Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

ThroughTek Kalay SDK uses a predictable PSK value in the DTLS session when encountering an unexpected PSK identity

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00712 53rd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ThroughTekKalay SDK3.1.10.0 – 3.1.10.16; 3.2.0.0 – 3.3.6.1; 3.4.0.0 – 3.4.7.3; 4.0.0.0 – 4.3.3.1—No fix listedCNA
  • Kalay SDK VendorThroughTek Affected 3.1.10.0 – 3.1.10.16; 3.2.0.0 – 3.3.6.1; 3.4.0.0 – 3.4.7.3; 4.0.0.0 – 4.3.3.1 Fixed in — No fix listed CNA

CPE configurations NVD · 9

CPEVersionsRoleVendor
cpe:2.3:o:wyze:cam_v3_firmware:4.36.11.5859:*:*:*:*:*:*:*4.36.11.5859VulnerableWyze
cpe:2.3:h:wyze:cam_v3:-:*:*:*:*:*:*:*not specified by NVDRunning onWyze
cpe:2.3:o:roku:indoor_camera_se_firmware:3.0.2.4679:*:*:*:*:*:*:*3.0.2.4679VulnerableRoku
cpe:2.3:h:roku:indoor_camera_se:-:*:*:*:*:*:*:*not specified by NVDRunning onRoku
cpe:2.3:o:owletcare:cam_firmware:*:*:*:*:*:*:*:*before 4.2.11VulnerableOwletcare
cpe:2.3:h:owletcare:cam:-:*:*:*:*:*:*:*not specified by NVDRunning onOwletcare
cpe:2.3:o:owletcare:cam_2_firmware:*:*:*:*:*:*:*:*before 4.2.10VulnerableOwletcare
cpe:2.3:h:owletcare:cam_2:-:*:*:*:*:*:*:*not specified by NVDRunning onOwletcare
cpe:2.3:a:throughtek:kalay_platform:-:*:*:*:*:*:*:*not specified by NVDVulnerableThroughTek
  • cpe:2.3:o:wyze:cam_v3_firmware:4.36.11.5859:*:*:*:*:*:*:* Versions 4.36.11.5859 Vulnerable ·Wyze
  • cpe:2.3:h:wyze:cam_v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Wyze
  • cpe:2.3:o:roku:indoor_camera_se_firmware:3.0.2.4679:*:*:*:*:*:*:* Versions 3.0.2.4679 Vulnerable ·Roku
  • cpe:2.3:h:roku:indoor_camera_se:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Roku
  • cpe:2.3:o:owletcare:cam_firmware:*:*:*:*:*:*:*:* Versions before 4.2.11 Vulnerable ·Owletcare
  • cpe:2.3:h:owletcare:cam:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Owletcare
  • cpe:2.3:o:owletcare:cam_2_firmware:*:*:*:*:*:*:*:* Versions before 4.2.10 Vulnerable ·Owletcare
  • cpe:2.3:h:owletcare:cam_2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Owletcare
  • cpe:2.3:a:throughtek:kalay_platform:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·ThroughTek

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-6324
  2. 2026-10-03 Alias added: GHSA-8xpm-gr22-c94j

References

Exploit 1

  • TI-2023-05804 Owlet Camera OS command injection CVSS 3.1HIGH 8.8
  • TI-2023-05805 Stack-based buffer overflow in message parser functionality CVSS 3.1HIGH 8.8
  • TI-2023-05806 ThroughTek Kalay SDK insufficient verification of message authenticity CVSS 3.1MEDIUM 6.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences