CVE-2023-6323: Owletcare Cam 2 Firmware

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

ThroughTek Kalay SDK does not verify the authenticity of received messages, allowing an attacker to impersonate an authoritative server.

Affected products

  • Owletcare Cam 2 Firmware: before 4.2.10 (fixed in 4.2.10)
  • Owletcare Cam Firmware: before 4.2.11 (fixed in 4.2.11)
  • Roku Indoor Camera SE Firmware: version 3.0.2.4679 only
  • Throughtek Kalay Platform: affected versions not specified
  • Wyze Cam v3 Firmware: version 4.36.11.5859 only

Published 2024-05-15. Last modified 2026-06-17.