CVE-2021-28372

ThroughTek's Kalay Platform 2.0 network allows an attacker to impersonate an arbitrary ThroughTek (TUTK) device given a valid 20-byte uniquely assigned identifier (UID). This could result in an attacker hijacking a victim's connection and forcing them into supplying credentials needed to access the victim TUTK device.

• CWE-290

• https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0020/FEYE-2021-0020.mdMitigation, Third Party Advisory
• https://www.fireeye.com/blog/threat-research/2021/08/mandiant-discloses-critical-vulnerability-affecting-iot-devices.htmlExploit, Mitigation, Third Party Advisory
• https://www.throughtek.com/kalay_overview.htmlBroken Link, Vendor Advisory
• https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0020/FEYE-2021-0020.mdMitigation, Third Party Advisory
• https://www.fireeye.com/blog/threat-research/2021/08/mandiant-discloses-critical-vulnerability-affecting-iot-devices.htmlExploit, Mitigation, Third Party Advisory
• https://www.throughtek.com/kalay_overview.htmlBroken Link, Vendor Advisory

Published

Aug 17, 2021

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-28357Remote Procedure Call Runtime Remote Code Execution Vulnerab…8.8
• CVE-2021-28358Remote Procedure Call Runtime Remote Code Execution Vulnerab…8.8
• CVE-2021-28359The "origin" parameter passed to some of the endpoints like …6.1
• CVE-2021-28361An issue was discovered in Storage Performance Development K…7.5
• CVE-2021-28362An issue was discovered in Contiki through 3.0. When sending…7.5
• CVE-2021-28363The urllib3 library 1.26.x before 1.26.4 for Python omits SS…6.5
• CVE-2021-28373The auth_internal plugin in Tiny Tiny RSS (aka tt-rss) befor…7.5
• CVE-2021-28374The Debian courier-authlib package before 0.71.1-2 for Couri…7.5
• CVE-2021-28375An issue was discovered in the Linux kernel through 5.11.6. …7.8
• CVE-2021-28376ChronoForms 7.0.7 allows fname Directory Traversal to read a…2.7
• CVE-2021-28377ChronoForums 2.0.11 allows av Directory Traversal to read ar…5.3
• CVE-2021-28378Gitea 1.12.x and 1.13.x before 1.13.4 allows XSS via certain…5.4