ZeroHour

CVE-2019-5036

PoC
CVSS 3.1
7.5 high
EPSS
<1%p41
Published
()
Modified
Description

An exploitable denial-of-service vulnerability exists in the Weave error reporting functionality of the Nest Cam IQ Indoor, version 4620002. A specially crafted weave packets can cause an arbitrary Weave Exchange Session to close, resulting in a denial of service. An attacker can send a specially crafted packet to trigger this vulnerability.

Vendors
google
Products
nest cam iq indoor firmware
Weakness
CWE-284, CWE-346
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

In the news