Denial of Service Vulnerability in Nest Cam IQ Indoor by Nest Labs

CVE-2019-5043

What is CVE-2019-5043?

An exploitable denial-of-service vulnerability exists in the Weave daemon of the Nest Cam IQ Indoor, version 4620002. Through the establishment of numerous TCP connections, an attacker can induce unrestricted resource allocation, ultimately leading to a denial of service. This vulnerability allows malicious actors to connect multiple times to the device, thus compromising its functionality and rendering it inoperable.

References