The vulnerability of the development package for integrating cloud services and communication functions in IoT devices. The Kalay SDK, a microprogramming software for video surveillance cameras such as Owlet Cam v1, Owlet Cam v2, Wyze Cam v3, and Roku Indoor Camera SE, is related to the use of uninitialized variables, allowing attackers to disclose confidential information.

🗓️ 23 Jul 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

Kalay SDK flaw with uninitialized variables in IoT cloud services risks data leakage from Owlet Cam v1/v2, Wyze Cam v3, and Roku Indoor Camera SE.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2023-6324	17 May 202415:10	–	circl
CNNVD	ThroughTek Kalay Platform 安全漏洞	15 May 202400:00	–	cnnvd
CVE	CVE-2023-6324	15 May 202412:09	–	cve
Cvelist	CVE-2023-6324 ThroughTek Kalay SDK error in handling the PSK identity	15 May 202412:09	–	cvelist
EUVD	EUVD-2023-58566	3 Oct 202520:07	–	euvd
NVD	CVE-2023-6324	15 May 202413:15	–	nvd
OSV	CVE-2023-6324	15 May 202413:15	–	osv
Positive Technologies	PT-2024-5067 · Owlet +3 · Owlet Cam V1 +4	15 May 202400:00	–	ptsecurity
The Hacker News	Researchers Uncover 11 Security Flaws in GE HealthCare Ultrasound Machines	16 May 202410:12	–	thn
Vulnrichment	CVE-2023-6324 ThroughTek Kalay SDK error in handling the PSK identity	15 May 202412:09	–	vulnrichment

Vulners

Node

throughtek kalay_sdkRange<4.3.4.2

Source	Link
github	www.github.com/advisories/GHSA-8xpm-gr22-c94j
vuldb	www.vuldb.com/fr/
bitdefender	www.bitdefender.com/blog/labs/notes-on-throughtek-kalay-vulnerabilities-and-their-impact/
securityvulnerability	www.securityvulnerability.io/vulnerability/CVE-2023-6324
web	www.web.nvd.nist.gov/view/vuln/detail

23 Jul 2024 00:00Current

5.7Medium risk

Vulners AI Score5.7

CVSS 38.1

CVSS 28.5

EPSS0.00712

kalay sdk uninitialized variables data leakage iot cameras owlet wyze roku camera