Skip to content
OpenAdvisories
Medium · 5.3 CVE-2019-5034 EUVD-2019-14641GHSA-v6f5-6w5w-36m9

An exploitable information disclosure vulnerability exists in the Weave Legacy Pairing functionality of Nest Cam IQ Indoor version 4620002.…

Published Aug 20, 2019 · Updated Aug 4, 2024 · Assigned by talos

Description

An exploitable information disclosure vulnerability exists in the Weave Legacy Pairing functionality of Nest Cam IQ Indoor version 4620002. A set of specially crafted weave packets can cause an out of bounds read, resulting in information disclosure. An attacker can send packets to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
— Nest Labs Nest Labs Nest Cam IQ Indoor version 4620002 —

References