Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: ThroughTek Component: Kalay Platform Clear all filters
TI-2023-05807 CVE-2023-6324 · GHSA-8xpm-gr22-c94j

ThroughTek Kalay SDK error in handling the PSK identity

Priority MEDIUM 41

ThroughTek Kalay SDK uses a predictable PSK value in the DTLS session when encountering an unexpected PSK identity

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00712 Published 2024-05-15 No fix listed CWE-457
TI-2023-05805 CVE-2023-6322 · GHSA-cw8j-9ggg-f37g

Stack-based buffer overflow in message parser functionality

Priority MEDIUM 42

A stack-based buffer overflow vulnerability exists in the message parsing functionality of the Roku Indoor Camera SE version 3.0.2.4679 and Wyze Cam v3 version 4.36.11.5859.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01022 Published 2024-05-15 No fix listed CWE-121
TI-2023-05804 CVE-2023-6321 · GHSA-7h6w-cw39-chrh

Owlet Camera OS command injection

Priority MEDIUM 45

A command injection vulnerability exists in the IOCTL that manages OTA updates.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02748 Published 2024-05-15 Fixed in 4.2.10, 4.2.11 CWE-78