CVE-2021-32934
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2021
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
ThroughTek P2P SDK - Cleartext Transmission of Sensitive Information
The affected ThroughTek P2P products (SDKs using versions before 3.1.5, any versions with nossl tag, device firmware not using AuthKey for IOTC conneciton, firmware using AVAPI module without enabling DTLS mechanism, and firmware using P2PTunnel or RDT module) do not sufficiently protect data transferred between the local device and ThroughTek servers. This can allow an attacker to access sensitive information, such as camera feeds.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
P2P SDK
- Vendor
- ThroughTek
- Product
- P2P SDK
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| all with nossl tag | affected | Unavailable | Unavailable | Unavailable | None listed |
| firmware using AuthKey for IOTC connection | unaffected | Unavailable | Unavailable | Unavailable | None listed |
| firmware using AVAPI module without enabling DTLS mechanism | affected | Unavailable | Unavailable | Unavailable | None listed |
| firmware using P2PTunnel or RDT module | affected | Unavailable | Unavailable | Unavailable | None listed |
| All | affected | custom | Unavailable | 3.1.5 | None listed |