topic Re: Camera using OpenSSL 0.9.6d and earlier in Cameras and Doorbells

Camera using OpenSSL 0.9.6d and earlier

travelingmaniam — Wed, 19 Apr 2023 15:35:52 GMT

Nest Indoor cameras are using OpenSSL technology. There is a known vulnerability for malicious attacks. Is Google working to update this on the indoor cameras? I do not have this issue on the older Nest outdoor cameras. Signatures detects attempts to exploit a known vulnerability against SSL Client Master Key packet. OpenSSL 0.9.6d and earlier versions are vulnerable. Attackers can send malicious Key packets to exploit a buffer overflow condition in the KEY_ARG parameter.

Re: Camera using OpenSSL 0.9.6d and earlier

EmersonB — Sat, 27 May 2023 14:58:56 GMT

Hello travelingmaniam,

Thanks for reaching out here in the Community and we appreciate you bringing this up to our attention however, we don't have any news to share about these concerns. Please keep an eye on the Community website to check the updates. Let us know if you have more questions in mind.

Best,
Emerson

Re: Camera using OpenSSL 0.9.6d and earlier

Princesss — Tue, 30 May 2023 14:34:09 GMT

Hi there,

We just want to check if you have seen our response posted above. Let us know if you have additional questions, otherwise we'll be locking the thread.

Best,

Princess

Re: Camera using OpenSSL 0.9.6d and earlier

Princesss — Thu, 01 Jun 2023 14:45:28 GMT

Hey travelingmaniam,

Due to inactivity, I'll go ahead and lock this thread in 24 hours. Feel free to start a new thread if you need assistance with your Google Nest devices and we'd be glad to assist you further.

Best,

Princess