Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-5036

Опубликовано: 20 авг. 2019
Источник: nvd
CVSS3: 7.5
CVSS3: 7.5
CVSS2: 7.8
EPSS Низкий

Описание

An exploitable denial-of-service vulnerability exists in the Weave error reporting functionality of the Nest Cam IQ Indoor, version 4620002. A specially crafted weave packets can cause an arbitrary Weave Exchange Session to close, resulting in a denial of service. An attacker can send a specially crafted packet to trigger this vulnerability.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:google:nest_cam_iq_indoor_firmware:4620002:*:*:*:*:*:*:*
cpe:2.3:h:google:nest_cam_iq_indoor:-:*:*:*:*:*:*:*

EPSS

Процентиль: 22%
0.00072
Низкий

7.5 High

CVSS3

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-284
CWE-346

Связанные уязвимости

CVSS3: 7.5
github
больше 3 лет назад

An exploitable denial-of-service vulnerability exists in the Weave error reporting functionality of the Nest Cam IQ Indoor, version 4620002. A specially crafted weave packets can cause an arbitrary Weave Exchange Session to close, resulting in a denial of service. An attacker can send a specially crafted packet to trigger this vulnerability.

EPSS

Процентиль: 22%
0.00072
Низкий

7.5 High

CVSS3

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-284
CWE-346