nvd-json-data-feeds/CVE-2024/CVE-2024-329xx/CVE-2024-32928.json

{
  "id": "CVE-2024-32928",
  "sourceIdentifier": "dsap-vuln-management@google.com",
  "published": "2024-08-19T17:15:07.557",
  "lastModified": "2024-08-19T18:36:20.123",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The libcurl CURLOPT_SSL_VERIFYPEER option was disabled on a subset of requests made by Nest production devices which enabled a potential man-in-the-middle attack on requests to Google cloud services by any host the traffic was routed through."
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://support.google.com/product-documentation/answer/14771247?hl=en&ref_topic=12974021&sjid=9111851316942032590-NA#zippy=",
      "source": "dsap-vuln-management@google.com"
    }
  ]
}