Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2023-6324

ThroughTek Kalay SDK error in handling the PSK identity

ThroughTek Kalay SDK uses a predictable PSK value in the DTLS session when encountering an unexpected PSK identity

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Owletcare Roku Throughtek and 1 more
Products
Cam Cam 2 Cam 2 Firmware and 6 more
CVE-2023-6323

ThroughTek Kalay SDK insufficient verification of message authenticity

ThroughTek Kalay SDK does not verify the authenticity of received messages, allowing an attacker to impersonate an authoritative server.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Owletcare Roku Throughtek and 1 more
Products
Cam Cam 2 Cam 2 Firmware and 6 more
CVE-2023-6322

Stack-based buffer overflow in message parser functionality

A stack-based buffer overflow vulnerability exists in the message parsing functionality of the Roku Indoor Camera SE version 3.0.2.4679 and Wyze Cam v3 version 4.36.11.5859. A specially crafted message can lead to stack-based buffer overflow. An attacker can make authenticated requests to trigger this vulnerability.

CVSS 3.1 · 7.2 High EPSS 1.0% KEV · Not listed
Vendors
Roku Throughtek Wyze
Products
Indoor Camera Se Indoor Camera Se Firmware Kalay Platform and 2 more