Affected Products

Vendor / product matrix with CVE counts sourced from the CPE catalog.

Export CSV

Products

1 vendor
VendorProductsCVEsKEVAvg EPSSWorst Severity
roku
24041.5%HIGH

Related CVEs

4
CVE IDDescriptionSeverityCVSSKEVEPSSPublished
CVE-2023-6324ThroughTek Kalay SDK uses a predictable PSK value in the DTLS session when encountering an unexpected PSK identityHIGH8.8—49.0%May 15, 2024
CVE-2023-6323ThroughTek Kalay SDK does not verify the authenticity of received messages, allowing an attacker to impersonate an authoritative server.MEDIUM6.5—24.6%May 15, 2024
CVE-2023-6322A stack-based buffer overflow vulnerability exists in the message parsing functionality of the Roku Indoor Camera SE version 3.0.2.4679 and Wyze Cam v3 version 4.36.11.5859. A specially crafted message can lead to stack-based buffer overflow. An attacker can make authenticated requests to trigger this vulnerability.HIGH8.8—51.0%May 15, 2024
CVE-2022-27152Roku devices running RokuOS v9.4.0 build 4200 or earlier that uses a Realtek WiFi chip is vulnerable to Arbitrary file modification.MEDIUM5.7——Apr 8, 2022