CVE-2023-6323

MEDIUM

ThroughTek Kalay SDK - Message Authenticity Bypass

Title source: manual
STIX 2.1

Description

ThroughTek Kalay SDK does not verify the authenticity of received messages, allowing an attacker to impersonate an authoritative server.

References (1)

Core 1

Scores

CVSS v3 4.3
EPSS 0.0033
EPSS Percentile 24.3%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-345
Status published
Products (5)
owletcare/cam_2_firmware < 4.2.10
owletcare/cam_firmware < 4.2.11
roku/indoor_camera_se_firmware 3.0.2.4679
throughtek/kalay_platform
wyze/cam_v3_firmware 4.36.11.5859
Published May 15, 2024
Tracked Since Feb 18, 2026