medium4.3
CVE-2023-6323
ThroughTek Kalay SDK does not verify the authenticity of received messages, allowing an attacker to impersonate an authoritative server.
Impact
ThroughTek Kalay SDK does not verify the authenticity of received messages, allowing an attacker to impersonate an authoritative server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wyze | Cam V3 Firmware | Version 4.36.11.5859 |
| Roku | Indoor Camera Se Firmware | Version 3.0.2.4679 |
| Owletcare | Cam Firmware | before 4.2.11 |
| Owletcare | Cam 2 Firmware | before 4.2.10 |
| Throughtek | Kalay Platform | All versions |