MEDIUM🇵🇱 Wersja polska

CVE-2024-22013

CVSS 5.3v3.1pub. 2024-09-16upd. 2025-07-24

U-Boot environment is read from unauthenticated partition.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

  • Google Nest Wifi Point

    HW
    Google
    all versions

  • Google Nest Wifi Point Firmware

    OS
    Google
    3.73.424613

  • Google Nest Wifi Pro

    HW
    Google
    all versions

  • Google Nest Wifi Pro Firmware

    OS
    Google
    3.73.424613

  • Google Nest Wifi Router

    HW
    Google
    all versions

  • Google Nest Wifi Router Firmware

    OS
    Google
    3.73.424613
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2024-22004CRITICAL10.0PL ✓same product

Wyciek pamięci Trusted Application w urządzeniach Google Nest Wifi

CVE-2023-6339CRITICAL10.0PL ✓same product

Google Nest WiFi Pro – zdalne wykonanie kodu z uprawnieniami root i kompromitacja danych

CVE-2023-2626HIGH7.5same product

There exists an authentication bypass vulnerability in OpenThread border router devices and implementations. T...

CVE-2025-10585CRITICAL9.8⚠ KEVPL ✓same vendor

Type confusion w V8 (Google Chrome) — zdalne uszkodzenie sterty

CVE-2024-7971CRITICAL9.6⚠ KEVPL ✓same vendor

Type confusion w V8 (Google Chrome/Edge) umożliwiający heap corruption