CVE-2023-6323

ThroughTek Kalay SDK does not verify the authenticity of received messages, allowing an attacker to impersonate an authoritative server.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - cve-requests@bitdefender.com

Published

2024-05-15

Last modified

2024-08-02

Weaknesses

CWE-345

Affected products

• Cam 2 Firmware (Owletcare)
• Cam Firmware (Owletcare)
• Indoor Camera Se Firmware (Roku)
• Kalay Platform (Throughtek)
• Kalay Sdk (Throughtek)
• Cam V3 Firmware (Wyze)

References

• https://bitdefender.com/blog/labs/notes-on-throughtek-kalay-vulnerabilities-and-their-impact/