Kalay P2p Software Development Kit vulnerabilities

Product

Kalay P2p Software Development Kit

by Throughtek · last CVE May 19, 2022

CVEs

On KEV

8.3

Max CVSS

New 30D

Severity mix

Critical 0High 2Medium 0Low 0

Severity

Exploitation

Watch

Add Kalay P2p Software Development Kit to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-28372	8.3	3%	Aug 17	ThroughTek's Kalay Platform 2.0 network allows an attacker to impersonate an arbitrary ThroughTek (TUTK) device given a valid 20-byte uniquely assigned identifier (UID) Affected: before 3.1.10
CVE-2021-32934	7.5	1%	May 19	The affected ThroughTek P2P products (SDKs using versions before 3.1.5, any versions with nossl tag, device firmware not using AuthKey for IOTC conneciton, firmware using AVAPI… Affected: through 3.1.5