CVE-2019-5035

CRITICAL

9.0

Beschreibung

An exploitable information disclosure vulnerability exists in the Weave PASE pairing functionality of the Nest Cam IQ Indoor, version 4620002. A set of specially crafted weave packets can brute force a pairing code, resulting in greater Weave access and potentially full device control. An attacker can send specially crafted packets to trigger this vulnerability.

CVE Details

CVSS v3.1 Bewertung9.0

SchweregradCRITICAL

CVSS VektorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatHIGH

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht8/20/2019

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

google:nest_cam_iqgoogle:nest_cam_iq_indoor_firmware

Schwachen (CWE)

CWE-307CWE-327

Referenzen

https://talosintelligence.com/vulnerability_reports/TALOS-2019-0798(talos-cna@cisco.com)

https://talosintelligence.com/vulnerability_reports/TALOS-2019-0798(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.