Approved changes feed: RSS · Atom
cpe:2.3:a:throughtek:p2p_sdk:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Throughtek (bc76c150-daa1-5e94-ae3f-9e117abc7ca3) |
|---|---|
| Product | P2P Sdk (5ca53604-0620-5189-aac5-e1b537548ac6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-32934 |
vulnerable | 2026-06-08 05:32:08.220050 |
ThroughTek P2P SDK - Cleartext Transmission of Sensitive Information
CRITICAL (9.1)
The affected ThroughTek P2P products (SDKs using versions before 3.1.5, any versions with nossl tag, device firmware not using AuthKey for IOTC conneciton, firmware using AVAPI module without enabling DTLS mechanism, and firmware using P2PTunnel or RDT module) do not sufficiently protect data transferred between the local device and ThroughTek servers. This can allow an attacker to access sensitive information, such as camera feeds.
Published: 2022-05-19T17:20:06.000Z
Updated: 2025-04-16T16:19:34.297Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.