CVE-2024-44097

🗓️ 02 Oct 2024 14:06:33Reported by Google_DevicesType

The application does not properly validate server certificates during TLS connection initialization, enabling network attackers to intercept and manipulate data

Reporter	Title	Published	Views	Family All 6
Circl	CVE-2024-44097	2 Oct 202417:11	–	circl
CNNVD	Google Nest 安全漏洞	2 Oct 202400:00	–	cnnvd
CNVD	Google Nest Trust Management Issues Vulnerabilities	17 Oct 202400:00	–	cnvd
Cvelist	CVE-2024-44097	2 Oct 202414:06	–	cvelist
NVD	CVE-2024-44097	2 Oct 202414:15	–	nvd
Vulnrichment	CVE-2024-44097	2 Oct 202414:06	–	vulnrichment

NVD

Node

google nest_doorbell_(battery)_firmwareRange<1.73c

AND

google nest_doorbell_(battery)Match-

Node

google nest_cam_(outdoor_or_indoor,_battery)_firmwareRange<1.73c

AND

google nest_cam_(outdoor_or_indoor,_battery)Match-

Node

google nest_cam_with_floodlight_firmwareRange<1.73c

AND

google nest_cam_with_floodlightMatch-

Node

google nest_cam_(indoor,_wired)_firmwareRange<1.73c

AND

google nest_cam_(indoor,_wired)Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "Android",
    "vendor": "Google",
    "versions": [
      {
        "status": "affected",
        "version": "unknown"
      }
    ]
  }
]

Source	Link
support	www.support.google.com/product-documentation/answer/14950962

24 Jul 2025 15:58Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.19.8

EPSS0.00076

SSVC

CWE-269