PT-2024-14935 · Google · Google Nest Wifi Pro

Published 2024-01-02 · Updated 2024-04-09 · CVE-2023-6339

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Nest WiFi Pro (affected versions not specified)

Description A severe issue has been disclosed for Google Nest WiFi Pro, allowing for root code-execution and user-data compromise. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited. Technical details about exploitation are not provided.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Encryption of Sensitive Data

Weakness Enumeration

CWE-311

Related Identifiers

CVE-2023-6339

Affected Products

Google Nest Wifi Pro

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2023-6339 · Security Note
• https://twitter.com/flawedworlddev/status/1777712484519981355 · Twitter Post
• https://t.me/cvenotify/66763 · Telegram Post
• https://twitter.com/vuldb/status/1742475902091764061 · Twitter Post
• https://t.me/cibsecurity/74211 · Telegram Post
• https://vuldb.com/?id.249563 · Note
• https://twitter.com/CVEnew/status/1742303055021056025 · Twitter Post
• https://support.google.com/product-documentation/answer/14273332?hl=en&ref_topic=12974021&sjid=4533873659772963473-NA · Note
• https://twitter.com/VulmonFeeds/status/1742330112308019533 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1742401946886324689 · Twitter Post