Security Researchers Find Several Bugs In Nest Security Cameras

Peter Reutemann <[email protected]> Fri, 23 Aug 2019 13:42:12 +1200
Newsgroups gmane.org.user-groups.linux.waikato
Message-ID <CAHoQ12LE9eR25AncvQGcSyiOO+ZyMcX6TfUHcCe9WK37HtWmtA@mail.gmail.com>
'Hackers could have logged into your Nest Cam IQ Indoor and watch
whatever was happening in your home by taking advantage of a
vulnerability found by security researchers. The hackers could have
also prevented you from using the camera, or use access to it to break
into your home network. Researchers Lilith Wyatt and Claudio Bozzato
of Cisco Talos discovered the vulnerabilities and disclosed them
publicly on August 19. The two found eight vulnerabilities that are
based in the Nest implementation of the Weave protocol. The Weave
protocol is designed specifically for communications among Internet of
Things or IoT devices.

Nest has provided a firmware update that the company says will fix the
vulnerabilities. The vulnerabilities apply to version 4620002 of the
Nest Cam IQ indoor device. You can check the version of your camera on
the Nest app. Nest says that the updates will happen automatically if
your camera is connected to the internet. "We've fixed the disclosed
bugs and started rolling them out to all Nest Camera IQs," Google said
in a statement to ZDNet. "The devices will update automatically so
there's no action required from users."'

-- source: https://it.slashdot.org/story/19/08/22/2134208

Cheers, Peter
-- 
Peter Reutemann
Dept. of Computer Science
University of Waikato, NZ
+64 (7) 858-5174
http://www.cms.waikato.ac.nz/~fracpete/
http://www.data-mining.co.nz/
_______________________________________________
wlug mailing list | [email protected]
Unsubscribe: https://list.waikato.ac.nz/mailman/listinfo/wlug