← CVE Intelligence

CVE-2023-6324

ThroughTek Kalay SDK error in handling the PSK identity PUBLISHED

Description (CNA)

ThroughTek Kalay SDK uses a predictable PSK value in the DTLS session when encountering an unexpected PSK identity

Affected (CNA)

Vendor / productVersions
ThroughTek / Kalay SDKaffected 3.1.10.0 through 3.1.10.16; affected 3.2.0.0 through 3.3.6.1; affected 3.4.0.0 through 3.4.7.3; affected 4.0.0.0 through 4.3.3.1

CWE

CWE-457

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.