Kalay Platform@- Security Vulnerabilities and Issues — Kalay Platform@- CVE List

Lucene search

ThroughtekKalay Platform-

4 matches found

CVE•added 2024/05/15 1:15 p.m.•20 views

CVE-2023-6322

A stack-based buffer overflow vulnerability exists in the message parsing functionality of the Roku Indoor Camera SE version 3.0.2.4679 and Wyze Cam v3 version 4.36.11.5859. A specially crafted message can lead to stack-based buffer overflow. An attacker can make authenticated requests to trigger t...

8.8CVSS7AI score0.00288EPSS

CVE•added 2024/05/15 1:15 p.m.•20 views

CVE-2023-6323

ThroughTek Kalay SDK does not verify the authenticity of received messages, allowing an attacker to impersonate an authoritative server.

6.5CVSS6.8AI score0.00171EPSS

CVE•added 2024/05/15 1:15 p.m.•19 views

CVE-2023-6324

ThroughTek Kalay SDK uses a predictable PSK value in the DTLS session when encountering an unexpected PSK identity

8.8CVSS6.8AI score0.00432EPSS

CVE•added 2024/05/15 1:15 p.m.•15 views

CVE-2023-6321

A command injection vulnerability exists in the IOCTL that manages OTA updates. A specially crafted command can lead to command execution as the root user. An attacker can make authenticated requests to trigger this vulnerability.

8.8CVSS7.2AI score0.00394EPSS