Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ThroughTek Kalay SDK error in handling the PSK identity
Vulnerability Description
ThroughTek Kalay SDK uses a predictable PSK value in the DTLS session when encountering an unexpected PSK identity
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Vulnerability Type
使用未经初始化的变量
Vulnerability Title
ThroughTek Kalay Platform 安全漏洞
Vulnerability Description
throughtek ThroughTek Kalay Platform是中国物联智慧（throughtek）公司的一个应用软件。利用 P2P 技术启用 Kalay Cloud Platform 服务。 ThroughTek Kalay Platform 存在安全漏洞，该漏洞源于存在处理PSK身份时出错的问题。受影响版本如下： 3.1.10.0 至 3.1.10.16 版本； 3.2.0.0 至 3.3.6.1 版本；3.4.0.0 到 3.4.7.3 版本；4.0.0.0 至4.3.3.1版本。
CVSS Information
N/A
Vulnerability Type
N/A