CVE-2023-6323

MEDIUM

ThroughTek Kalay SDK - SSRF

Title source: llm
STIX 2.1

Description

ThroughTek Kalay SDK does not verify the authenticity of received messages, allowing an attacker to impersonate an authoritative server.

References (1)

Scores

CVSS v3 4.3
EPSS 0.0018
EPSS Percentile 39.0%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-345
Status published
Products (5)
owletcare/cam_2_firmware < 4.2.10
owletcare/cam_firmware < 4.2.11
roku/indoor_camera_se_firmware 3.0.2.4679
throughtek/kalay_platform
wyze/cam_v3_firmware 4.36.11.5859
Published May 15, 2024
Tracked Since Feb 18, 2026