TH
Vendor
Throughtek
8
CVEs
0
On KEV
0
New 30D
Products
KP8.8
Kalay Platform
Throughtek
4 CVEs0 on KEV0 new
KP8.3
Kalay P2p Software Development Kit
Throughtek
2 CVEs0 on KEV0 new
KS8.8
Kalay SDK
ThroughTek
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-6324 | KS Kalay SDK ThroughTek | 8.8 | May 15 | ThroughTek Kalay SDK error in handling the PSK identity |
| CVE-2023-6323 | KS Kalay SDK ThroughTek | 6.5 | May 15 | ThroughTek Kalay SDK insufficient verification of message authenticity |
| CVE-2023-6322 | KP Kalay Platform Throughtek | 8.8 | May 15 | Stack-based buffer overflow in message parser functionality |
| CVE-2023-6321 | KP Kalay Platform Throughtek | 8.8 | May 15 | Owlet Camera OS command injection |
| CVE-2021-32934 | KP Kalay P2p Software Development Kit Throughtek | 7.5 | May 19 | The affected ThroughTek P2P products (SDKs using versions before 3.1.5, any versions with nossl tag, device firmware not using AuthKey for IOTC conneciton, firmware using AVAPI… |
| CVE-2021-28372 | KP Kalay P2p Software Development Kit Throughtek | 8.3 | Aug 17 | ThroughTek's Kalay Platform 2.0 network allows an attacker to impersonate an arbitrary ThroughTek (TUTK) device given a valid 20-byte uniquely assigned identifier (UID) |