Approved changes feed: RSS · Atom

cpe:2.3:h:google:nest_mini:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorGoogle (f181d1eb-7269-5bae-b76e-e66ceb214562)
ProductNest Mini (2180cb71-eaab-5eac-9b6a-517ed11fe3af)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-32928 not_vulnerable 2026-06-08 06:37:24.706435 Details available
The libcurl CURLOPT_SSL_VERIFYPEER option was disabled on a subset of requests made by Nest production devices which enabled a potential man-in-the-middle attack on requests to Google cloud services by any host the traffic was routed through.
Published: 2024-08-19T16:38:01.140Z
Updated: 2025-03-14T15:47:28.052Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48419 not_vulnerable 2026-06-08 06:14:27.177557 An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in EoP
CRITICAL (10)
An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in Elevation of Privilege 
Published: 2024-01-02T18:44:01.180Z
Updated: 2025-06-17T20:29:05.915Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.