Google Home Firmware vulnerabilities

2 CVEs affecting Google Home Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-48419, published 2024-01-02.

More from Google.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-12716, published 2018-06-25. Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days. The API service on Google Home and Chromecast devices before mid-July 2018 does not prevent DNS rebinding attacks from reading the scan_results JSON data, which allows remote attackers to determine…
• CVE-2023-48419, published 2024-01-02. Critical severity, CVSS 9.8. EPSS: 0.2% chance of exploitation in the next 30 days. An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in Elevation of Privilege