Camera using OpenSSL 0.9.6d and earlier

[travelingmaniam]

Nest Indoor cameras are using OpenSSL technology. There is a known vulnerability for malicious attacks. Is Google working to update this on the indoor cameras? I do not have this issue on the older Nest outdoor cameras. Signatures detects attempts to exploit a known vulnerability against SSL Client Master Key packet. OpenSSL 0.9.6d and earlier versions are vulnerable. Attackers can send malicious Key packets to exploit a buffer overflow condition in the KEY_ARG parameter.

[EmersonB]

Hello travelingmaniam,

Thanks for reaching out here in the Community and we appreciate you bringing this up to our attention however, we don't have any news to share about these concerns. Please keep an eye on the Community website to check the updates. Let us know if you have more questions in mind.

Best,
Emerson

[Princesss]

Hey travelingmaniam,

Due to inactivity, I'll go ahead and lock this thread in 24 hours. Feel free to start a new thread if you need assistance with your Google Nest devices and we'd be glad to assist you further.
 

Best,

Princess

[Princesss]

Hi there,

We just want to check if you have seen our response posted above. Let us know if you have additional questions, otherwise we'll be locking the thread.
 

Best,

Princess