Throughtek Kalay P2p Software Development Kit — known CVE vulnerabilities

Every CVE whose affected-product data names Throughtek Kalay P2p Software Development Kit, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2021-32934 — CVSS 9.1 (critical): The affected ThroughTek P2P products (SDKs using versions before 3.1.5, any versions with nossl tag, device firmware not using AuthKey for…
• CVE-2021-28372 — CVSS 8.3 (high): ThroughTek's Kalay Platform 2.0 network allows an attacker to impersonate an arbitrary ThroughTek (TUTK) device given a valid 20-byte…