Kalay P2P Software Development Kit

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:throughtek:kalay_p2p_software_development_kit:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorThroughtek (bc76c150-daa1-5e94-ae3f-9e117abc7ca3)
ProductKalay P2P Software Development Kit (d6e181e3-b41e-58f6-8adb-5854662217d3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-32934 vulnerable 2026-06-08 05:32:08.220706 ThroughTek P2P SDK - Cleartext Transmission of Sensitive Information
CRITICAL (9.1)
The affected ThroughTek P2P products (SDKs using versions before 3.1.5, any versions with nossl tag, device firmware not using AuthKey for IOTC conneciton, firmware using AVAPI module without enabling DTLS mechanism, and firmware using P2PTunnel or RDT module) do not sufficiently protect data transferred between the local device and ThroughTek servers. This can allow an attacker to access sensitive information, such as camera feeds.
Published: 2022-05-19T17:20:06.000Z
Updated: 2025-04-16T16:19:34.297Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28372 vulnerable 2026-06-08 05:31:24.145055 Details available
ThroughTek's Kalay Platform 2.0 network allows an attacker to impersonate an arbitrary ThroughTek (TUTK) device given a valid 20-byte uniquely assigned identifier (UID). This could result in an attacker hijacking a victim's connection and forcing them into supplying credentials needed to access the victim TUTK device.
Published: 2021-08-17T21:48:35.000Z
Updated: 2024-08-03T21:40:14.092Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.