There exists an authentication bypass vulnerability in OpenThread border router devices and implementations. This issue allows unauthenticated nodes to craft radio frames using “Key ID Mode 2”: a special mode using a static encryption key to bypass security checks, resulting in a
There exists an authentication bypass vulnerability in OpenThread border router devices and implementations. This issue allows unauthenticated nodes to craft radio frames using “Key ID Mode 2”: a special mode using a static encryption key to bypass security checks, resulting in arbitrary IP packets being allowed on the Thread network. This provides a pathway for an attacker to send/receive…
| Vendor | Product | Versions |
|---|---|---|
| Nest Hub Max | 10.20221207.2.109 | |
| Nest Hub (2nd. gen) w/ Sleep Tracking | 10.20221207.2.100038 | |
| Nest Wifi 6E | 1.59 | |
| Google Wifi (next gen) | 14150.881.7 | |
| Nest Wifi Point | 1.56.1 | |
| Nest Hub Max | 10.20221207.2.109 | |
| Nest Hub (2nd. gen) w/ Sleep Tracking | 10.20221207.2.100038 |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.