Google Nest Cam Iq Indoor Firmware vulnerabilities

6 CVEs affecting Google Nest Cam Iq Indoor Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-5043, published 2019-10-31.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-5040, published 2019-08-20. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. An exploitable information disclosure vulnerability exists in the Weave MessageLayer parsing of Openweave-core version 4.0.2 and Nest Cam IQ Indoor version 4620002. A specially crafted weave packet…
CVE-2019-5043, published 2019-10-31. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. An exploitable denial-of-service vulnerability exists in the Weave daemon of the Nest Cam IQ Indoor, version 4620002. A set of TCP connections can cause unrestricted resource allocation, resulting in…
CVE-2019-5034, published 2019-08-20. Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days. An exploitable information disclosure vulnerability exists in the Weave Legacy Pairing functionality of Nest Cam IQ Indoor version 4620002. A set of specially crafted weave packets can cause an out…
CVE-2019-5037, published 2019-08-20. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. An exploitable denial-of-service vulnerability exists in the Weave certificate loading functionality of Nest Cam IQ Indoor camera, version 4620002. A specially crafted weave packet can cause an…
CVE-2019-5036, published 2019-08-20. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. An exploitable denial-of-service vulnerability exists in the Weave error reporting functionality of the Nest Cam IQ Indoor, version 4620002. A specially crafted weave packets can cause an arbitrary…
CVE-2019-5035, published 2019-08-20. Critical severity, CVSS 9.0. EPSS: 0.4% chance of exploitation in the next 30 days. An exploitable information disclosure vulnerability exists in the Weave PASE pairing functionality of the Nest Cam IQ Indoor, version 4620002. A set of specially crafted weave packets can brute force…