CVE-2023-48419

EUVD-2023-52470
An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in Elevation of Privilege 
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
10 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Google_DevicesCNA
10 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 6%
Affected Products (NVD)
VendorProductVersion
googlenest_audio_firmware
𝑥
< 2.58
googlenest_mini_firmware
𝑥
< 2.58
googlehome_mini_firmware
𝑥
< 2.58
googlehome_firmware
𝑥
< 2.58
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://support.google.com/product-documentation/answer/14273332?hl=en&ref_topic=12974021&sjid=4533873659772963473-NA#zippy=%2Cspeakers
https://support.google.com/product-documentation/answer/14273332?hl=en&ref_topic=12974021&sjid=4533873659772963473-NA#zippy=%2Cspeakers