How severe is CVE-2019-5035?

This vulnerability has a severity rating of CRITICAL with a CVSS score of 9 out of 10.

What type of vulnerability is CVE-2019-5035?

This is classified as CWE-307, which is a common weakness in software security.

CVE-2019-5035 - CRITICAL Severity | CVSS 9

Vulnerability Description

An exploitable information disclosure vulnerability exists in the Weave PASE pairing functionality of the Nest Cam IQ Indoor, version 4620002. A set of specially crafted weave packets can brute force a pairing code, resulting in greater Weave access and potentially full device control. An attacker can send specially crafted packets to trigger this vulnerability.

Related Vulnerabilities

CVE-2019-20031

CRITICAL

CVSS:9.1(Critical)

NEC UM8000, UM4730 and prior non-InMail voicemail systems with all known software versions may permit an infinite number of login attempts in the telephone user interface (TUI), effectively allowing b...

CWE-3072019

CVE-2022-36413

CRITICAL

CVSS:9.1(Critical)

Zoho ManageEngine ADSelfService Plus through 6203 is vulnerable to a brute-force attack that leads to a password reset on IDM applications.

CWE-3072022

CVE-2022-45790

CRITICAL

CVSS:9.1(Critical)

The Omron FINS protocol has an authenticated feature to prevent access to memory regions. Authentication is susceptible to bruteforce attack, which may allow an adversary to gain access to protected m...

CWE-3072022

CVE-2023-27172

CRITICAL

CVSS:9.1(Critical)

Xpand IT Write-back Manager v2.3.1 uses weak secret keys to sign JWT tokens. This allows attackers to easily obtain the secret key used to sign JWT tokens via a bruteforce attack.

CWE-3072023

CVE-2023-35172

CRITICAL

CVSS:9.1(Critical)

NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. In NextCloud Server versions 25.0.0 until 25.0.7 and 26.0.0 until 26.0.2 and N...

CWE-3072023

CVE-2023-3605

CRITICAL

CVSS:9.1(Critical)

A vulnerability was found in PHPGurukul Online Shopping Portal 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Registration Page. The...

CWE-3072023