Nest Mini Firmware (Google) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-08-19. Vendor: Google.

CVEs of Nest Mini Firmware

• CVE-2024-32928 - CVSS 5.9 (medium), 2024-08-19: The libcurl CURLOPT_SSL_VERIFYPEER option was disabled on a subset of requests made by Nest production devices which enabled a potential man-in-the-middle…
• CVE-2023-48419 - CVSS 10 (critical), 2024-01-02: An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in Elevation of Privilege