Vulnerabilities

TI-2021-12543 CVE-2021-32934 · GHSA-3v34-r58h-wm2h

ThroughTek P2P SDK - Cleartext Transmission of Sensitive Information

MEDIUM 49

The affected ThroughTek P2P products (SDKs using versions before 3.1.5, any versions with nossl tag, device firmware not using AuthKey for IOTC conneciton, firmware using AVAPI module without enabling DTLS mechanism, and…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00736 Published 2022-05-19 Fixed in firmware using AuthKey for IOTC connection CWE-319

TI-2021-09526 CVE-2021-28372 · GHSA-h5gx-r98q-mqhf

ThroughTek's Kalay Platform 2.0 network allows an attacker to impersonate an arbitrary…

MEDIUM 41

ThroughTek's Kalay Platform 2.0 network allows an attacker to impersonate an arbitrary ThroughTek (TUTK) device given a valid 20-byte uniquely assigned identifier (UID).

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.02554 Published 2021-08-17 No fix listed CWE-290

Vulnerabilities

Filters

ThroughTek P2P SDK - Cleartext Transmission of Sensitive Information

ThroughTek's Kalay Platform 2.0 network allows an attacker to impersonate an arbitrary…