Lucene search
MitreCVELIST:CVE-2021-28372HistoryAug 17, 2021 - 9:48 p.m.
CVE-2021-28372
2021-08-1721:48:35
mitre
www.cve.org
7
throughtek
kalay platform
network vulnerability
attacker hijacking
tutk device
uid
impersonation
credentials.
ThroughTek’s Kalay Platform 2.0 network allows an attacker to impersonate an arbitrary ThroughTek (TUTK) device given a valid 20-byte uniquely assigned identifier (UID). This could result in an attacker hijacking a victim’s connection and forcing them into supplying credentials needed to access the victim TUTK device.
Related
threatpost
threatpost
Bug in Millions of Flawed IoT Devices Lets Attackers Eavesdrop
2021-08-17 16:20:30
fireeye
fireeye
Mandiant Discloses Critical Vulnerability Affecting Millions of IoT Devices
2021-08-17 12:00:00
ics
ics
ThroughTek Kalay P2P SDK
2021-08-17 12:00:00
prion
prion
Code injection
2021-08-17 22:15:00
cve
cve
CVE-2021-28372
2021-08-17 22:15:08
CVE-2021-28732
2021-09-08 17:15:09
nessus
nessus
ThroughTek Kalay P2P SDK Improper Access Control (CVE-2021-28372)
2024-06-26 00:00:00
nvd
nvd
CVE-2021-28372
2021-08-17 22:15:08
CVE-2021-28732
2021-09-08 17:15:09
thn
thn