CyberSecBulletin

ThroughTek vulnerabilities

We track 2 vulnerabilities in ThroughTek products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 15, 2024.

2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score

Latest ThroughTek vulnerabilities

  • 8.8 High severity

    Indoor Camera SE: Out-of-bounds Write

    CVE-2023-6322RokuEPSS 1.02%

    A stack-based buffer overflow vulnerability exists in the message parsing functionality of the Roku Indoor Camera SE version 3.0.2.4679 and Wyze Cam v3 version 4.36.11.5859. A specially crafted message can lead to stack-based buffer overflow. An attacker can m

  • 8.8 High severity

    Cam v2: Improper Neutralization of Special Elements used in a Command

    CVE-2023-6321OwletEPSS 2.75%

    A command injection vulnerability exists in the IOCTL that manages OTA updates. A specially crafted command can lead to command execution as the root user. An attacker can make authenticated requests to trigger this vulnerability.