8.8

CVE-2023-6324

Exploit

ThroughTek Kalay SDK error in handling the PSK identity

ThroughTek Kalay SDK uses a predictable PSK value in the DTLS session when encountering an unexpected PSK identity
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Wyze ≫ Cam V3 Firmware Version 4.36.11.5859
   Wyze ≫ Cam V3 Version -
Roku ≫ Indoor Camera Se Firmware Version 3.0.2.4679
   Roku ≫ Indoor Camera Se Version -
Owletcare ≫ Cam Firmware Version < 4.2.11
   Owletcare ≫ Cam Version -
Owletcare ≫ Cam 2 Firmware Version < 4.2.10
   Owletcare ≫ Cam 2 Version -
Throughtek ≫ Kalay Platform Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.71% 0.487
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
cve-requests@bitdefender.com 8.1 2.8 5.2
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CWE-457 Use of Uninitialized Variable

The code uses a variable that has not been initialized, leading to unpredictable or unintended results.

CWE-908 Use of Uninitialized Resource

The product uses or accesses a resource that has not been initialized.

https://bitdefender.com/blog/labs/notes-on-throughtek-kalay-vulnerabilities-and-their-impact/
Third Party Advisory
Exploit