PT-2019-17420 · Nest · Nest Cam Iq Indoor

Claudio Bozzato + 1 · Publicado 2019-08-20 · Atualizado 2022-06-27 · CVE-2019-5034

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Nest Cam IQ Indoor version 4620002

Description An exploitable information disclosure issue exists in the Weave Legacy Pairing functionality. A set of specially crafted weave packets can cause an out of bounds read, resulting in information disclosure. An attacker can send packets to trigger this issue.

Recommendations For Nest Cam IQ Indoor version 4620002, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2019-5034

Produtos afetados

Nest Cam Iq Indoor

Referências · 3

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2019-0797 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-5034 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-5034 · Aviso do Fabricante