Nest Labs Nest Cam IQ indoor Weave CASE nlWeaveCertificate authentication bypass vulnerability

Talos Vulnerability Report TALOS-2019-0811 Nest Labs Nest Cam IQ indoor Weave CASE nlWeaveCertificate authentication bypass vulnerability August 19, 2019 CVE Number CVE-2019-5044 Summary An exploitable certificate authentication vulnerability exists in the Weave CASE Pairing function of the Nest...

Nest Labs Nest Cam IQ Indoor Weave KeyError denial-of-service vulnerability

Summary An exploitable denial-of-service vulnerability exists in the Weave error reporting functionality of the Nest Cam IQ Indoor, version 4620002. A specially crafted weave packets can cause an arbitrary Weave Exchange Session to close, resulting in a denial of service. An attacker can send a...

Nest Labs Openweave Weave DecodeMessageWithLength Information Disclosure Vulnerability

Summary An exploitable information disclosure vulnerability exists in the Weave MessageLayer parsing of Openweave-core version 4.0.2 and Nest Cam IQ Indoor version 4620002. A specially crafted weave packet can cause an integer overflow to occur, resulting in PacketBuffer data reuse. An attacker c...

Nest Labs Nest Cam IQ Indoor WeaveCASEEngine::DecodeCertificateInfo denial-of-service vulnerability

Summary An exploitable denial-of-service vulnerability exists in the Weave certificate loading functionality of the Nest Cam IQ Indoor camera, version 4620002. A specially crafted weave packet can cause an integer overflow and an out-of-bounds read on unmapped memory to occur, resulting in a deni...

Nest Labs Openweave Weave tool Print-TLV code execution vulnerability

Summary An exploitable command execution vulnerability exists in the print-tlv command of Weave tool. A specially crafted weave TLV can trigger a stack-based buffer overflow, resulting in code execution. An attacker can trigger this vulnerability by convincing the user to open a specially crafted...

Unauthorized access vulnerability in Weave scope

Weave Scope is an open source project. Weave scope has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information...

Google 'Android Things' — An Operating System for the Internet of Things

Google announced a Developers Preview of "Android Things" — an Android-based operating system platform for smart devices and Internet of Things IoT products. The Android-based Internet of Things OS is designed to make it easier for developers to build a smart appliance since they will be able to...

Amazon Linux AMI : scipy (ALAS-2013-242)

scipy: weave /tmp and current directory issues CVE-2013-4251 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux AMI Security Advisory ALAS-2013-242. include"compat.inc"; if description scriptid70904; scriptversion"1.5";...

Medium: scipy

Issue Overview: scipy: weave /tmp and current directory issues CVE-2013-4251 Affected Packages: scipy Issue Correction: Run yum update scipy or yum update --advisory ALAS-2013-242 to update your system. New Packages: i686: scipy-0.12.1-1.7.amzn1.i686 scipy-debuginfo-0.12.1-1.7.amzn1.i686...