PT-2019-17420 · Nest · Nest Cam Iq Indoor

Claudio Bozzato + 1 · Published 2019-08-20 · Updated 2022-06-27 · CVE-2019-5034

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Nest Cam IQ Indoor version 4620002

Description An exploitable information disclosure issue exists in the Weave Legacy Pairing functionality. A set of specially crafted weave packets can cause an out of bounds read, resulting in information disclosure. An attacker can send packets to trigger this issue.

Recommendations For Nest Cam IQ Indoor version 4620002, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2019-5034

Affected Products

Nest Cam Iq Indoor

References · 3

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2019-0797 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-5034 · Security Note
• https://osv.dev/vulnerability/CVE-2019-5034 · Vendor Advisory