CVE-2023-6324
8.1HIGHThroughTek Kalay SDK uses a predictable PSK value in the DTLS session when encountering an unexpected PSK identity
Published: 5/15/2024Updated: 2/11/2025
Description
ThroughTek Kalay SDK uses a predictable PSK value in the DTLS session when encountering an unexpected PSK identity
AI AnalysisPowered by AI
Affected Products
wyzecam_v3_firmware
4.36.11.5859
wyzecam_v3
-
rokuindoor_camera_se_firmware
3.0.2.4679
rokuindoor_camera_se
-
owletcarecam_firmware
owletcarecam
-
owletcarecam_2_firmware
owletcarecam_2
-
throughtekkalay_platform
-
References
- https://bitdefender.com/blog/labs/notes-on-throughtek-kalay-vulnerabilities-and-their-impact/ExploitThird Party Advisory
- https://bitdefender.com/blog/labs/notes-on-throughtek-kalay-vulnerabilities-and-their-impact/ExploitThird Party Advisory