CVE-2019-5034: Medium severity google nest cam iq vulnerability
An exploitable information disclosure vulnerability exists in the Weave Legacy Pairing functionality of Nest Cam IQ Indoor version 4620002. A set of specially crafted weave packets can cause an out of bounds read, resulting in information disclosure. An attacker can send packets to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-5034?
CVE-2019-5034 is considered a medium severity vulnerability due to its potential for information disclosure.
How do I fix CVE-2019-5034?
To mitigate CVE-2019-5034, update the Nest Cam IQ Indoor firmware to a patched version provided by Google.
What software is affected by CVE-2019-5034?
CVE-2019-5034 affects the Google Nest Cam IQ Indoor firmware version 4620002.
Can CVE-2019-5034 be exploited remotely?
Yes, CVE-2019-5034 can be exploited remotely by sending specially crafted packets to the vulnerable device.
What kind of vulnerability is CVE-2019-5034?
CVE-2019-5034 is an information disclosure vulnerability caused by an out of bounds read in the Weave Legacy Pairing functionality.