CVE-2023-6321

🗓️ 15 May 2024 12:07:44Reported by BitdefenderType

Command injection in OTA update IOCTL, allows root access

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of the development package for integrating cloud services and communication functions in IoT devices. The Kalay SDK, a microprogramming software for video surveillance cameras like Owlet Cam v1 and Owlet Cam v2, has a flaw related to the failure to eliminate special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands and increase their privileges.	24 May 202400:00	–	bdu_fstec
Circl	CVE-2023-6321	17 May 202415:10	–	circl
CNNVD	Owlet Cam 操作系统命令注入漏洞	15 May 202400:00	–	cnnvd
Cvelist	CVE-2023-6321 Owlet Camera OS command injection	15 May 202412:07	–	cvelist
EUVD	EUVD-2023-58563	3 Oct 202520:07	–	euvd
NVD	CVE-2023-6321	15 May 202413:15	–	nvd
OSV	CVE-2023-6321	15 May 202413:15	–	osv
Positive Technologies	PT-2023-9141 · Owlet · Owlet Cam	23 Oct 202300:00	–	ptsecurity
The Hacker News	Researchers Uncover 11 Security Flaws in GE HealthCare Ultrasound Machines	16 May 202410:12	–	thn
Vulnrichment	CVE-2023-6321 Owlet Camera OS command injection	15 May 202412:07	–	vulnrichment

NVD

Node

owletcare cam_firmwareRange<4.2.11

AND

owletcare camMatch-

Node

owletcare cam_2_firmwareRange<4.2.10

AND

owletcare cam_2Match-

Node

throughtek kalay_platformMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "Cam v2",
    "vendor": "Owlet",
    "versions": [
      {
        "lessThan": "4.2.10",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Cam v1",
    "vendor": "Owlet",
    "versions": [
      {
        "lessThan": "4.2.11",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
bitdefender	www.bitdefender.com/blog/labs/notes-on-throughtek-kalay-vulnerabilities-and-their-impact/

11 Feb 2025 21:32Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.2 - 8.8

EPSS0.00754

SSVC