Skip to content
OpenAdvisories
High · 7.5 CVE-2019-5036 EUVD-2019-14643GHSA-mw53-8qf5-qwp2

An exploitable denial-of-service vulnerability exists in the Weave error reporting functionality of the Nest Cam IQ Indoor, version 4620002…

Published Aug 20, 2019 · Updated Aug 4, 2024 · Assigned by talos

Description

An exploitable denial-of-service vulnerability exists in the Weave error reporting functionality of the Nest Cam IQ Indoor, version 4620002. A specially crafted weave packets can cause an arbitrary Weave Exchange Session to close, resulting in a denial of service. An attacker can send a specially crafted packet to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
— Nest Labs Nest Labs Nest Cam IQ Indoor version 4620002 —

References