{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2021-32934",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2021-32934",
    "idYear": 2021,
    "status": "PUBLISHED",
    "publishedAt": "2022-05-19T17:20:06.000Z",
    "updatedAt": "2025-04-16T16:19:34.297Z",
    "importedAt": "2026-10-24T01:56:32.228Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "ThroughTek P2P SDK - Cleartext Transmission of Sensitive Information",
      "summary": "The affected ThroughTek P2P products (SDKs using versions before 3.1.5, any versions with nossl tag, device firmware not using AuthKey for IOTC conneciton, firmware using AVAPI module without enabling DTLS mechanism, and firmware using P2PTunnel or RDT module) do not sufficiently protect data transferred between the local device and ThroughTek servers. This can allow an attacker to access sensitive information, such as camera feeds.",
      "affected": [
        {
          "vendor": "ThroughTek",
          "product": "P2P SDK",
          "versions": [
            {
              "version": "all with nossl tag",
              "status": "affected"
            },
            {
              "version": "firmware using AuthKey for IOTC connection",
              "status": "unaffected"
            },
            {
              "version": "firmware using AVAPI module without enabling DTLS mechanism",
              "status": "affected"
            },
            {
              "version": "firmware using P2PTunnel or RDT module",
              "status": "affected"
            },
            {
              "version": "All",
              "status": "affected",
              "versionType": "custom",
              "lessThanOrEqual": "3.1.5"
            }
          ]
        }
      ]
    }
  }
}