← Database
CVE-2024-44097
CRITICAL
CVSS: 9.8
Published: 2024-10-02
Modified: 2026-06-17
Description
According to the researcher: "The TLS connections are encrypted against tampering or eavesdropping. However, the application does not validate the server certificate properly while initializing the TLS connection. This allows for a network attacker to intercept the connection and read the data. The attacker could the either send the client a malicious response, or forward the (possibly modified) data to the real server."
Affected Platforms
Google Nest Doorbell \(Battery\)Google Nest Doorbell \(Battery\) FirmwareGoogle Nest Cam With Floodlight FirmwareGoogle Nest Cam \(Outdoor Or Indoor\, Battery\)Google Nest Cam \(Indoor\, Wired\) FirmwareGoogle Nest Cam \(Indoor\, Wired\)Google Nest Cam \(Outdoor Or Indoor\, Battery\) FirmwareGoogle Nest Cam With Floodlight