CVE-2019-5034

An exploitable information disclosure vulnerability exists in the Weave Legacy Pairing functionality of Nest Cam IQ Indoor version 4620002. A set of specially crafted weave packets can cause an out of bounds read, resulting in information disclosure. An attacker can send packets to trigger this vulnerability.

Score

CVSS 3.1 5.3 Medium

Status

Modified - talos-cna@cisco.com

Published

2019-08-20

Last modified

2024-08-04

Weaknesses

CWE-125

Affected products

• Nest Cam Iq Indoor Firmware (Google)

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0797