CVE-2021-32934

🗓️ 19 May 2022 17:20:06Reported by icscertType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 82 Views

Affected ThroughTek P2P products do not sufficiently protect data transferred, allowing access to sensitive information

Reporter	Title	Published	Views	Family All 16
ATTACKERKB	CVE-2021-32934	13 May 202100:00	–	attackerkb
Circl	CVE-2021-32934	16 Jun 202109:22	–	circl
CNNVD	ThroughTek P2P SDK 信息泄露漏洞	15 Jun 202100:00	–	cnnvd
CNVD	ThroughTek P2P SDK Information Disclosure Vulnerability	16 Jun 202100:00	–	cnvd
Cvelist	CVE-2021-32934 ThroughTek P2P SDK - Cleartext Transmission of Sensitive Information	19 May 202217:20	–	cvelist
EUVD	EUVD-2021-19655	7 Oct 202500:30	–	euvd
ICS	ThroughTek P2P SDK	15 Jun 202100:00	–	ics
NVD	CVE-2021-32934	19 May 202218:15	–	nvd
OSV	CVE-2021-32934	19 May 202218:15	–	osv
Prion	Design/Logic Flaw	19 May 202218:15	–	prion

NVD

Vulners

Node

throughtek kalay_p2p_software_development_kitRange≤3.1.5

[
  {
    "product": "P2P SDK",
    "vendor": "ThroughTek",
    "versions": [
      {
        "status": "affected",
        "version": "all with nossl tag"
      },
      {
        "status": "unaffected",
        "version": "firmware using AuthKey for IOTC connection"
      },
      {
        "status": "affected",
        "version": "firmware using AVAPI module without enabling DTLS mechanism"
      },
      {
        "status": "affected",
        "version": "firmware using P2PTunnel or RDT module"
      },
      {
        "lessThanOrEqual": "3.1.5",
        "status": "affected",
        "version": "All",
        "versionType": "custom"
      }
    ]
  }
]