Google Nest Mini Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Google Nest Mini Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2023-48419 — CVSS 10.0 (critical): An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in Elevation of Privilege
• CVE-2024-32928 — CVSS 5.9 (medium): The libcurl CURLOPT_SSL_VERIFYPEER option was disabled on a subset of requests made by Nest production devices which enabled a potential…