CVE-2023-6323
6.5 mediumEPSS 0.3%
Medium (6.5). EPSS 0.3% chance of exploitation in the next 30 days.
ThroughTek Kalay SDK does not verify the authenticity of received messages, allowing an attacker to impersonate an authoritative server.
Severity
CVSS 3.1
6.5 mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 25% of CVEs (scores of 2026-10-31)
- CWE
- CWE-345
- Published
- Modified
- Record from
- the NVD, synced
Affected
- owletcare:cam_2_firmware
- owletcare:cam_firmware
- roku:indoor_camera_se_firmware
- throughtek:kalay_platform
- wyze:cam_v3_firmware
References
Check your stackJSON