CVE:CVE-2023-2626
CNNVD:CNNVD-202307-2043
Google Nest是美国谷歌（Google）公司的一款智能家居产品。
Google Nest存在安全漏洞。该漏洞允许未经身份验证的节点使用“Key ID Mode 2”来伪造无线电帧，这是一种使用静态加密密钥绕过安全检查的特殊模式，从而允许任意 IP 数据包传输到 Thread 网络中。
solution:Upgrade google nest_hub_max_firmware to a higher version than 10.20221207.2.120,and avoid the version [10.20221207.2.109,10.20221207.2.120); Upgrade google nest_hub_firmware to a higher version than 10.20221207.2.100042,and avoid the version [10.20221207.2.100038,10.20221207.2.100042); Upgrade google wifi_firmware to a higher version than 14150.882.9,and avoid the version [14150.881.7,14150.882.9); Upgrade google nest_wifi_point_firmware to a higher version than 1.56.368671,and avoid the version [1.56.1,1.56.368671); Upgrade google nest_wifi_6e_firmware to a higher version than 1.63.355999,and avoid the version [1.59,1.63.355999)