Filtered by vendor Owletcare Subscriptions
Filtered by product Cam 2 Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-6324 4 Owletcare, Roku, Throughtek and 1 more 9 Cam, Cam 2, Cam 2 Firmware and 6 more 2025-02-11 8.1 High
ThroughTek Kalay SDK uses a predictable PSK value in the DTLS session when encountering an unexpected PSK identity
CVE-2023-6323 4 Owletcare, Roku, Throughtek and 1 more 9 Cam, Cam 2, Cam 2 Firmware and 6 more 2025-02-11 4.3 Medium
ThroughTek Kalay SDK does not verify the authenticity of received messages, allowing an attacker to impersonate an authoritative server.
CVE-2023-6321 2 Owletcare, Throughtek 5 Cam, Cam 2, Cam 2 Firmware and 2 more 2025-02-11 7.2 High
A command injection vulnerability exists in the IOCTL that manages OTA updates. A specially crafted command can lead to command execution as the root user. An attacker can make authenticated requests to trigger this vulnerability.