Cyber Resilience

CVE-2024-22013

Medium

Published: 16 September 2024

Published
16 September 2024
Modified
24 July 2025
KEV Added
—
Patch
—
CVSS Score v3.1 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS Score 0.0017 37.7th percentile
Risk Priority 11 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-22013 is a medium-severity an unspecified weakness vulnerability in Google Nest Wifi Pro Firmware. Its CVSS base score is 5.3 (Medium).

Operationally, ranked at the 37.7th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

U-Boot environment is read from unauthenticated partition.

CWE(s)
NVD-CWE-noinfo

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

google
nest wifi pro firmware
3.73.424613
google
nest wifi point firmware
3.73.424613
google
nest wifi router firmware
3.73.424613

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References