Approved changes feed: RSS · Atom

cpe:2.3:o:owletcare:cam_2_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorOwletcare (5f046847-f5e5-512d-8b96-1adbf0b067ad)
ProductCam 2 Firmware (ae06c97a-0922-5988-8826-6016c964182e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-6324 vulnerable 2026-06-08 06:19:46.957563 ThroughTek Kalay SDK error in handling the PSK identity
HIGH (8.1)
ThroughTek Kalay SDK uses a predictable PSK value in the DTLS session when encountering an unexpected PSK identity
Published: 2024-05-15T12:09:29.682Z
Updated: 2024-08-02T08:28:21.511Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6323 vulnerable 2026-06-08 06:19:46.945670 ThroughTek Kalay SDK insufficient verification of message authenticity
MEDIUM (4.3)
ThroughTek Kalay SDK does not verify the authenticity of received messages, allowing an attacker to impersonate an authoritative server.
Published: 2024-05-15T12:08:57.397Z
Updated: 2024-08-02T08:28:21.783Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6321 vulnerable 2026-06-08 06:19:46.937038 Owlet Camera OS command injection
HIGH (7.2)
A command injection vulnerability exists in the IOCTL that manages OTA updates. A specially crafted command can lead to command execution as the root user. An attacker can make authenticated requests to trigger this vulnerability.
Published: 2024-05-15T12:07:44.554Z
Updated: 2024-08-02T08:28:21.329Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.