Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ThroughTek Kalay SDK insufficient verification of message authenticity
Vulnerability Description
ThroughTek Kalay SDK does not verify the authenticity of received messages, allowing an attacker to impersonate an authoritative server.
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
对数据真实性的验证不充分
Vulnerability Title
ThroughTek Kalay Platform 数据伪造问题漏洞
Vulnerability Description
throughtek ThroughTek Kalay Platform是中国物联智慧（throughtek）公司的一个应用软件。利用 P2P 技术启用 Kalay Cloud Platform 服务。 ThroughTek Kalay Platform 4.3.4.2之前版本存在数据伪造问题漏洞，该漏洞源于不会验证消息的真实性，从而允许攻击者冒充权威服务器。
CVSS Information
N/A
Vulnerability Type
N/A