Description
ThroughTek Kalay SDK does not verify the authenticity of received messages, allowing an attacker to impersonate an authoritative server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ThroughTek | Kalay SDK | < 4.3.4.2 | 4.3.4.2 |
Medium · 4.3
CVE-2023-6323
EUVD-2023-58565GHSA-fc4q-rhhm-x7fh
ThroughTek Kalay SDK insufficient verification of message authenticity
Published May 15, 2024 · Updated Aug 2, 2024 · Assigned by Bitdefender