Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2019-5035
HistoryAug 20, 2019 - 10:15 p.m.

CVE-2019-5035

2019-08-2022:15:11
CWE-307
CWE-327
[email protected]
web.nvd.nist.gov
8

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.002

Percentile

53.0%

JSON

An exploitable information disclosure vulnerability exists in the Weave PASE pairing functionality of the Nest Cam IQ Indoor, version 4620002. A set of specially crafted weave packets can brute force a pairing code, resulting in greater Weave access and potentially full device control. An attacker can send specially crafted packets to trigger this vulnerability.

Affected configurations

Nvd
Node
googlenest_cam_iq_indoor_firmwareMatch4620002
AND
googlenest_cam_iqMatch-
VendorProductVersionCPE
googlenest_cam_iq_indoor_firmware4620002cpe:2.3:o:google:nest_cam_iq_indoor_firmware:4620002:*:*:*:*:*:*:*
googlenest_cam_iq-cpe:2.3:h:google:nest_cam_iq:-:*:*:*:*:*:*:*

Related

cve 1
talos 1
prion 1
cvelist 1
threatpost 1
talosblog 1
cve
cve
CVE-2019-5035
2019-08-20 22:15:11
talos
talos
Nest Labs Nest Cam IQ Indoor Weave PASE pairing brute force vulnerability
2019-08-19 00:00:00
prion
prion
Information disclosure
2019-08-20 22:15:00
cvelist
cvelist
CVE-2019-5035
2019-08-20 21:07:51
threatpost
threatpost
Google Nest Security Cam Bugs Allow Device Takeover
2019-08-19 18:31:56
talosblog
talosblog
Vulnerability Spotlight: Multiple bugs in OpenWeave and Nest Labs Nest Cam IQ indoor camera
2019-08-19 08:51:52

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.002

Percentile

53.0%

JSON
Related for NVD:CVE-2019-5035
cve1talos1prion1cvelist1threatpost1talosblog1