Lucene search
BitdefenderVULNRICHMENT:CVE-2023-6324HistoryMay 15, 2024 - 12:09 p.m.
CVE-2023-6324 ThroughTek Kalay SDK error in handling the PSK identity
2024-05-1512:09:29
CWE-457
Bitdefender
github.com
1
cve-2023-6324
throughtek kalay sdk
psk
vulnerability
dtls
session
predictable value
error handling.
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
AI Score
6.9
Confidence
Low
EPSS
0
Percentile
9.0%
SSVC
Exploitation
none
Automatable
no
Technical Impact
total
ThroughTek Kalay SDK uses a predictable PSK value in the DTLS session when encountering an unexpected PSK identity
ADP Affected
[
{
"cpes": [
"cpe:2.3:a:throughtek:kalay_sdk:3.1.10.0:*:*:*:*:*:*:*"
],
"vendor": "throughtek",
"product": "kalay_sdk",
"versions": [
{
"status": "affected",
"version": "3.1.10.0"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:throughtek:kalay_sdk:3.2.0.0:*:*:*:*:*:*:*"
],
"vendor": "throughtek",
"product": "kalay_sdk",
"versions": [
{
"status": "affected",
"version": "3.2.0.0"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:throughtek:kalay_sdk:3.4.0.0:*:*:*:*:*:*:*"
],
"vendor": "throughtek",
"product": "kalay_sdk",
"versions": [
{
"status": "affected",
"version": "3.4.0.0"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:throughtek:kalay_sdk:4.0.0.0:*:*:*:*:*:*:*"
],
"vendor": "throughtek",
"product": "kalay_sdk",
"versions": [
{
"status": "affected",
"version": "4.0.0.0"
}
],
"defaultStatus": "unknown"
}
]Related
cve
cve
CVE-2023-6324
2024-05-15 13:15:26
nvd
nvd
CVE-2023-6324
2024-05-15 13:15:26
cvelist
cvelist
CVE-2023-6324 ThroughTek Kalay SDK error in handling the PSK identity
2024-05-15 12:09:29
thn
thn
Researchers Uncover 11 Security Flaws in GE HealthCare Ultrasound Machines
2024-05-16 10:12:00
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
AI Score
6.9
Confidence
Low
EPSS
0
Percentile
9.0%
SSVC
Exploitation
none
Automatable
no
Technical Impact
total
Related for VULNRICHMENT:CVE-2023-6324