CVE-2024-22013

Published: Sep 16, 2024Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

U-Boot environment is read from unauthenticated partition.

Products: Google: Nest Wifi Pro Firmware, Nest Wifi Point Firmware, Nest Wifi Router Firmware

3 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Google Nest Wifi Pro Firmware	Version 3.73.424613

Running on/with	Platform Versions
Google Nest Wifi Pro	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Google Nest Wifi Point Firmware	Version 3.73.424613

Running on/with	Platform Versions
Google Nest Wifi Point	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Google Nest Wifi Router Firmware	Version 3.73.424613

Running on/with	Platform Versions
Google Nest Wifi Router	All versions

Source: dsap-vuln-management@google.com

Vendor Advisory

No history available yet.