CVE-2019-5039

An exploitable command execution vulnerability exists in the ASN1 certificate writing functionality of Openweave-core version 4.0.2. A specially crafted weave certificate can trigger a heap-based buffer overflow, resulting in code execution. An attacker can craft a weave certificate to trigger th...

PT-2019-17426

Name of the Vulnerable Software and Affected Versions Openweave-core version 4.0.2 Nest Cam IQ Indoor version 4620002 Description An information disclosure issue exists due to integer overflow in Weave MessageLayer parsing. A specially crafted weave packet can cause PacketBuffer data reuse. This...

PT-2019-17420

Name of the Vulnerable Software and Affected Versions Nest Cam IQ Indoor version 4620002 Description An exploitable information disclosure issue exists in the Weave Legacy Pairing functionality. A set of specially crafted weave packets can cause an out of bounds read, resulting in information...

PT-2019-17422

Name of the Vulnerable Software and Affected Versions Nest Cam IQ Indoor version 4620002 Description A denial-of-service issue exists in the Weave error reporting functionality. It can be triggered by a specially crafted weave packet, causing an arbitrary Weave Exchange Session to close. This...

PT-2019-17423

Name of the Vulnerable Software and Affected Versions Nest Cam IQ Indoor camera version 4620002 Description A denial-of-service issue exists in the Weave certificate loading functionality. It can be triggered by a specially crafted weave packet, causing an integer overflow and an out-of-bounds re...

PT-2019-17421

Name of the Vulnerable Software and Affected Versions Nest Cam IQ Indoor version 4620002 Description An information disclosure issue exists in the Weave PASE pairing functionality. It can be exploited by sending specially crafted weave packets to brute force a pairing code, potentially leading to...

CVE-2019-5038: Stack-based Buffer Overflow

An exploitable command execution vulnerability exists in the print-tlv command of Weave tool. A specially crafted weave TLV can trigger a stack-based buffer overflow, resulting in code execution. An attacker can trigger this vulnerability by convincing the user to open a specially crafted Weave...

PT-2019-17424

Name of the Vulnerable Software and Affected Versions Weave tool affected versions not specified Description A command execution issue exists in the print-tlv command of the Weave tool. It can be triggered by a specially crafted Weave TLV, leading to a stack-based buffer overflow and code...

CVE-2019-5036: Improper Access Control

An exploitable denial-of-service vulnerability exists in the Weave error reporting functionality of the Nest Cam IQ Indoor, version 4620002. A specially crafted weave packets can cause an arbitrary Weave Exchange Session to close, resulting in a denial of service. An attacker can send a specially...

CVE-2019-5034: Out-of-bounds Read

An exploitable information disclosure vulnerability exists in the Weave Legacy Pairing functionality of Nest Cam IQ Indoor version 4620002. A set of specially crafted weave packets can cause an out of bounds read, resulting in information disclosure. An attacker can send packets to trigger this...

CVE-2019-5037: Integer Overflow or Wraparound

An exploitable denial-of-service vulnerability exists in the Weave certificate loading functionality of Nest Cam IQ Indoor camera, version 4620002. A specially crafted weave packet can cause an integer overflow and an out-of-bounds read on unmapped memory to occur, resulting in a denial of servic...

CVE-2019-5035: Improper Restriction of Excessive Authentication Attempts

An exploitable information disclosure vulnerability exists in the Weave PASE pairing functionality of the Nest Cam IQ Indoor, version 4620002. A set of specially crafted weave packets can brute force a pairing code, resulting in greater Weave access and potentially full device control. An attacke...

Google Nest Security Cam Bugs Allow Device Takeover

Multiple vulnerabilities in Google’s Nest Cam IQ connected indoor security camera would allow an attacker on the same network to take over the device, execute code on it and/or take it offline. Nest Labs’ Cam IQ Indoor integrates security-enhanced Linux in Android, Google Assistant and facial...

Vulnerability Spotlight: Multiple bugs in OpenWeave and Nest Labs Nest Cam IQ indoor camera

Lilith Wyatt and Claudio Bozzato of Cisco Talos discovered these vulnerabilities. Cisco Talos recently discovered multiple vulnerabilities in the Nest Cam IQ Indoor camera. One of Nest Labs’ most advanced internet-of-things devices, the Nest Cam IQ Indoor integrates Security-Enhanced Linux in...

Nest Labs Openweave-core Weave Tool Code Execution Vulnerability

Openweave-core is a home LAN application stack for asynchronous, symmetric, device-to-device and device-to-cloud communication for control path and data path messaging. A code execution vulnerability in the print-tlv command of the Weave tool in Nest Labs Openweave-core version 4.0.2 can be...

Nest Labs Nest Cam IQ indoor Weave CASE nlWeaveCertificate authentication bypass vulnerability

Talos Vulnerability Report TALOS-2019-0811 Nest Labs Nest Cam IQ indoor Weave CASE nlWeaveCertificate authentication bypass vulnerability August 19, 2019 CVE Number CVE-2019-5044 Summary An exploitable certificate authentication vulnerability exists in the Weave CASE Pairing function of the Nest...

Nest Labs Nest Cam IQ Indoor Weave Legacy Pairing Information Disclosure Vulnerability

Summary An exploitable information disclosure vulnerability exists in the Weave Legacy Pairing functionality of Nest Cam IQ Indoor version 4620002. A set of specially crafted weave packets can cause an out of bounds read, resulting in information disclosure. An attacker can send packets to trigge...

Nest Labs Openweave Weave ASN1Writer PutValue Code Execution Vulnerability

Summary An exploitable command execution vulnerability exists in the ASN1 certificate writing functionality of Openweave-core version 4.0.2. A specially crafted weave certificate can trigger a heap-based buffer overflow, resulting in code execution. An attacker can craft a weave certificate to...

Nest Labs Nest Cam IQ Indoor Weave TCP connection denial-of-service vulnerability

Summary An exploitable denial-of-service vulnerability exists in the Weave daemon of the Nest Cam IQ Indoor, version 4620002. A set of TCP connections can cause unrestricted resource allocation, resulting in a denial of service. An attacker can connect multiple times to trigger this vulnerability...

Nest Labs Nest Cam IQ Indoor WeaveCASEEngine::DecodeCertificateInfo denial-of-service vulnerability

Summary An exploitable denial-of-service vulnerability exists in the Weave certificate loading functionality of the Nest Cam IQ Indoor camera, version 4620002. A specially crafted weave packet can cause an integer overflow and an out-of-bounds read on unmapped memory to occur, resulting in a deni...