NetSight
high8.1

CVE-2023-6324

ThroughTek Kalay SDK uses a predictable PSK value in the DTLS session when encountering an unexpected PSK identity

Impact

ThroughTek Kalay SDK uses a predictable PSK value in the DTLS session when encountering an unexpected PSK identity

Affected products

VendorProductAffected versions
WyzeCam V3 Firmware
Version 4.36.11.5859
RokuIndoor Camera Se Firmware
Version 3.0.2.4679
OwletcareCam Firmware
before 4.2.11
OwletcareCam 2 Firmware
before 4.2.10
ThroughtekKalay Platform
All versions

Weakness classification

References