CVE-2021-28372

rexcardinal

CheckedeverydeviceonmyhomelabagainstNVD.ThreecameraswithcriticalCVEs.Twowithpublicexploits.NoneofitshowingupinGrafanaorUnifi.

CVE-2021-28372 has to be the most frustrating disclosure in recent history. Not one news source has mentioned even a single vendor or end user product that uses the Kalay SDK, other than to say it is "83 million devices" which is absolutely unhelpful #Kalay #infosec #ThroughTek

"RT /TheHackersNews: FireEye has disclosed a new critical #vulnerability (CVE-2021-28372) in the ThroughTek Kalay P2P SDK that could allow remote attackers to take control of affected devices, spy on camera audio and video feeds, and compromise device credentials. …

Critical bug allows remote compromise, control of millions of IoT devices (CVE-2021-28372) - https://t.co/oyjwJETPMI?amp=1 - /Mandiant /ThroughTek #IoT #SDK #IoTSecurity #vulnerability

News:FireEye has disclosed a new critical vulnerability (CVE-2021-28372) in the ThroughTek Kalay P2P SDK that could allow remote attackers to take control of affected devices, spy on camera audio and video feeds, and compromise device credential -The Hacker News

8300万台以上のIoT機器が影響を受ける脆弱性が発見される、防犯カメラの映像を盗み取られる可能性も - GIGAZINE https://t.co/DQh9UuSiqM?amp=1 世界中に存在するネットワークカメラを含む8300万台以上のIoTデバイスが影響を受ける脆弱性「CVE-2021-28372」の存在を発表。 乗っ取りも可能みたいです。

Mandiant Discloses Critical Vulnerability Affecting Millions of IoT Devices https://t.co/9GmWBkP65m?amp=1 #infosec < #ThroughTek #Kalay protocol issue < CVE-2021-28372: Device Impersonation

RT TheHackersNews "RT /TheHackersNews: FireEye has disclosed a new critical #vulnerability (CVE-2021-28372) in the ThroughTek Kalay P2P SDK that could allow remote attackers to take control of affected devices, spy on camera audio and video feeds, and compromise device crede…

Critical bug allows remote compromise, control of millions of IoT devices (CVE-2021-28372)

FireEye has disclosed a new critical vulnerability (CVE-2021-28372) in the ThroughTek Kalay P2P SDK that could allow remote attackers to take control of affected devices, spy on camera audio and video feeds, and compromise device credentials.