Google Nest Cam IQ Indoor Firmware 4620002
Approved changes feed: RSS · Atom
cpe:2.3:o:google:nest_cam_iq_indoor_firmware:4620002:*:*:*:*:*:*:*
part: o version: 4620002 update: *
| Vendor | Google (f181d1eb-7269-5bae-b76e-e66ceb214562) |
|---|---|
| Product | Nest Cam Iq Indoor Firmware (ae66c8a9-13d4-593c-8725-650461fa6c02) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-5043 |
vulnerable | 2026-06-08 05:13:57.589737 |
Details available
MEDIUM (5.3)
An exploitable denial-of-service vulnerability exists in the Weave daemon of the Nest Cam IQ Indoor, version 4620002. A set of TCP connections can cause unrestricted resource allocation, resulting in a denial of service. An attacker can connect multiple times to trigger this vulnerability.
Published: 2019-10-31T20:02:30.000Z
Updated: 2024-08-04T19:47:55.624Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5040 |
vulnerable | 2026-06-08 05:13:57.585211 |
Details available
HIGH (8.2)
An exploitable information disclosure vulnerability exists in the Weave MessageLayer parsing of Openweave-core version 4.0.2 and Nest Cam IQ Indoor version 4620002. A specially crafted weave packet can cause an integer overflow to occur, resulting in PacketBuffer data reuse. An attacker can send a packet to trigger this vulnerability.
Published: 2019-08-20T20:42:39.000Z
Updated: 2024-08-04T19:40:49.003Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5037 |
vulnerable | 2026-06-08 05:13:57.582048 |
Details available
HIGH (7.5)
An exploitable denial-of-service vulnerability exists in the Weave certificate loading functionality of Nest Cam IQ Indoor camera, version 4620002. A specially crafted weave packet can cause an integer overflow and an out-of-bounds read on unmapped memory to occur, resulting in a denial of service. An attacker can send a specially crafted packet to trigger.
Published: 2019-08-20T20:39:57.000Z
Updated: 2024-08-04T19:40:49.265Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5036 |
vulnerable | 2026-06-08 05:13:57.581456 |
Details available
HIGH (7.5)
An exploitable denial-of-service vulnerability exists in the Weave error reporting functionality of the Nest Cam IQ Indoor, version 4620002. A specially crafted weave packets can cause an arbitrary Weave Exchange Session to close, resulting in a denial of service. An attacker can send a specially crafted packet to trigger this vulnerability.
Published: 2019-08-20T21:08:40.000Z
Updated: 2024-08-04T19:40:49.272Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5035 |
vulnerable | 2026-06-08 05:13:57.579762 |
Details available
CRITICAL (9)
An exploitable information disclosure vulnerability exists in the Weave PASE pairing functionality of the Nest Cam IQ Indoor, version 4620002. A set of specially crafted weave packets can brute force a pairing code, resulting in greater Weave access and potentially full device control. An attacker can send specially crafted packets to trigger this vulnerability.
Published: 2019-08-20T21:07:51.000Z
Updated: 2024-08-04T19:40:49.376Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5034 |
vulnerable | 2026-06-08 05:13:57.578754 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.