Beveiligingsadvies

CVE-2024-32928

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-08-19 16:38:01
Laatst bijgewerkt 2025-03-14 15:47:28
Toegewezen door Google_Devices
CVSS-score 5.9
Status PUBLISHED

Beschrijving

The libcurl CURLOPT_SSL_VERIFYPEER option was disabled on a subset of requests made by Nest production devices which enabled a potential man-in-the-middle attack on requests to Google cloud services by any host the traffic was routed through.