CVE-2019-5034

PoC —

CVSS 3.1

5.3 medium

EPSS

<1%p46

Published

Aug 20, 2019 (Aug 20, 2019)

Modified

Jun 17, 2026

Description

An exploitable information disclosure vulnerability exists in the Weave Legacy Pairing functionality of Nest Cam IQ Indoor version 4620002. A set of specially crafted weave packets can cause an out of bounds read, resulting in information disclosure. An attacker can send packets to trigger this vulnerability.

Vendors: google
Products: nest cam iq indoor firmware
Weakness: CWE-125
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news2 stories

Vulnerability Spotlight: Multiple vulnerabilities in Aspose APIs

Cisco TalosAug 20, 09:00 UTC · Aug 20, 2019Vulnerability in the wildCVE-2019-5032 CVE-2019-5033 CVE-2019-5041+1 CVEs

Vulnerability Spotlight: Multiple bugs in OpenWeave and Nest Labs Nest Cam IQ indoor camera

Cisco TalosAug 19, 15:00 UTC · Aug 19, 2019Vulnerability in the wildCVE-2019-5043 CVE-2019-5034 CVE-2019-5035+5 CVEs