What’s Vulnerable › Vulnerabilities

CVE-2021-32934: ThroughTek P2P SDK - Cleartext Transmission of Sensitive Information

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-05-19 · updated 2026-06-17
• Weakness: CWE-319

Description

The affected ThroughTek P2P products (SDKs using versions before 3.1.5, any versions with nossl tag, device firmware not using AuthKey for IOTC conneciton, firmware using AVAPI module without enabling DTLS mechanism, and firmware using P2PTunnel or RDT module) do not sufficiently protect data transferred between the local device and ThroughTek servers. This can allow an attacker to access sensitive information, such as camera feeds.

Affected products

• ThroughTek P2P SDK: through 3.1.5

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-21-166-01
• https://www.cisa.gov/uscert/ics/advisories/icsa-21-166-01

Get alerted when CVE-2021-32934 or the next vulnerability affects your stack