Vulnerability Description
An exploitable denial-of-service vulnerability exists in the Weave certificate loading functionality of Nest Cam IQ Indoor camera, version 4620002. A specially crafted weave packet can cause an integer overflow and an out-of-bounds read on unmapped memory to occur, resulting in a denial of service. An attacker can send a specially crafted packet to trigger.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Nest Cam Iq Indoor Firmware | 4620002 | |
| Nest Cam Iq Indoor | - |
Related Weaknesses (CWE)
References
- https://talosintelligence.com/vulnerability_reports/TALOS-2019-0800ExploitThird Party Advisory
- https://talosintelligence.com/vulnerability_reports/TALOS-2019-0800ExploitThird Party Advisory
FAQ
What is CVE-2019-5037?
CVE-2019-5037 is a vulnerability with a CVSS score of 7.5 (HIGH). An exploitable denial-of-service vulnerability exists in the Weave certificate loading functionality of Nest Cam IQ Indoor camera, version 4620002. A specially crafted weave packet can cause an intege...
How severe is CVE-2019-5037?
CVE-2019-5037 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-5037?
Check the references section above for vendor advisories and patch information. Affected products include: Google Nest Cam Iq Indoor Firmware, Google Nest Cam Iq Indoor.