An exploitable denial-of-service vulnerability exists in the Weave error reporting functionality of the Nest Cam IQ Indoor, version 4620002. A specially crafted weave packets can cause an arbitrary Weave Exchange Session to close, resulting in a denial of service. An attacker can send a specially crafted packet to trigger this vulnerability.
References
Link | Resource |
---|---|
https://talosintelligence.com/vulnerability_reports/TALOS-2019-0799 | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2019-08-20 15:15
Updated : 2022-06-27 10:28
NVD link : CVE-2019-5036
Mitre link : CVE-2019-5036
JSON object : View
CWE
CWE-346
Origin Validation Error
Products Affected
- nest_cam_iq_indoor
- nest_cam_iq_indoor_firmware