VDB
CVE-2019-5040
CVE-2019-5040
PUBLISHED
CVSS 8.199999809265137 HIGH
An exploitable information disclosure vulnerability exists in the Weave MessageLayer parsing of Openweave-core version 4.0.2 and Nest Cam IQ Indoor version 4620002. A specially crafted weave packet can cause an integer overflow to occur, resulting in PacketBuffer data reuse. An attacker can send a packet to trigger this vulnerability.
EPSS 0.77% · 54.2th percentile
Risk Scores
CVSS 3.0
8.199999809265137
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
EPSS Score
0.77%
54.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | Nest Labs | Nest Labs Openweave-core 4.0.2 Nest Labs Nest Cam IQ Indoor version 4620002 |
| openweave | openweave-core | 4.0.2 |
| nest_cam_iq_indoor_firmware | 4620002 |
Timeline
- Aug 19, 2019 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 25, 2021 EPSS Score
- Dec 29, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Mar 2, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 4, 2022 EPSS Score
- Sep 8, 2022 EPSS Score
- Nov 10, 2022 EPSS Score