CVE-2019-5035: Critical severity google nest cam iq vulnerability
An exploitable information disclosure vulnerability exists in the Weave PASE pairing functionality of the Nest Cam IQ Indoor, version 4620002. A set of specially crafted weave packets can brute force a pairing code, resulting in greater Weave access and potentially full device control. An attacker can send specially crafted packets to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-5035?
CVE-2019-5035 has a high severity rating due to the potential for remote exploitation that could allow an attacker to gain full device control.
How do I fix CVE-2019-5035?
To mitigate CVE-2019-5035, you should update the Google Nest Cam IQ Indoor firmware to the latest version provided by Google.
What kind of vulnerability is CVE-2019-5035?
CVE-2019-5035 is an information disclosure vulnerability that affects the Weave PASE pairing functionality.
Which device is affected by CVE-2019-5035?
CVE-2019-5035 specifically affects the Google Nest Cam IQ Indoor firmware version 4620002.
Can CVE-2019-5035 be exploited remotely?
Yes, CVE-2019-5035 can be exploited remotely using specially crafted Weave packets to brute force a pairing code.