ThroughTek records

6 published records for vendor throughtek.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

6 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
36Monitor	CVE-2023-6321No exploit	Owlet Camera OS command injectionowletcare · cam firmware · CWE-78 RCE Command injection	High8.8	—	2.7%	May 15, 2024
35Monitor	CVE-2023-6322No exploit	Stack-based buffer overflow in message parser functionalityroku · indoor camera se firmware · CWE-121 Memory safety	High8.8	—	1.0%	May 15, 2024
35Monitor	CVE-2023-6324No exploit	ThroughTek Kalay SDK error in handling the PSK identitythroughtek · kalay platform · CWE-457	High8.8	—	0.7%	May 15, 2024
34Monitor	CVE-2021-28372No exploit	ThroughTek's Kalay Platform 2.0 network allows an attacker to impersonate an arbitrary ThroughTek (TUTK) device given a valid 20-byte uniquethroughtek · kalay p2p software development kit · CWE-290 Pre-auth Auth bypass	High8.3	—	2.6%	Aug 17, 2021
30Monitor	CVE-2021-32934No exploit	ThroughTek P2P SDK - Cleartext Transmission of Sensitive Informationthroughtek · kalay p2p software development kit · CWE-319 Pre-auth Weak crypto	High7.5	—	0.6%	May 19, 2022
26Monitor	CVE-2023-6323No exploit	ThroughTek Kalay SDK insufficient verification of message authenticitythroughtek · kalay platform · CWE-345 Pre-auth	Medium6.5	—	0.3%	May 15, 2024

CVE-2023-6321
36Monitor
Owlet Camera OS command injection
HighCVSS 8.8No exploitEPSS 3%
- RCE
- Command injection
owletcare · cam firmwareMay 15, 2024
CVE-2023-6322
35Monitor
Stack-based buffer overflow in message parser functionality
HighCVSS 8.8No exploitEPSS 1%
- Memory safety
roku · indoor camera se firmwareMay 15, 2024
CVE-2023-6324
35Monitor
ThroughTek Kalay SDK error in handling the PSK identity
HighCVSS 8.8No exploitEPSS 1%
throughtek · kalay platformMay 15, 2024
CVE-2021-28372
34Monitor
ThroughTek's Kalay Platform 2.0 network allows an attacker to impersonate an arbitrary ThroughTek (TUTK) device given a valid 20-byte unique
HighCVSS 8.3No exploitEPSS 3%
- Pre-auth
- Auth bypass
throughtek · kalay p2p software development kitAug 17, 2021
CVE-2021-32934
30Monitor
ThroughTek P2P SDK - Cleartext Transmission of Sensitive Information
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Weak crypto
throughtek · kalay p2p software development kitMay 19, 2022
CVE-2023-6323
26Monitor
ThroughTek Kalay SDK insufficient verification of message authenticity
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
throughtek · kalay platformMay 15, 2024