Google Nest Wifi Point Firmware vulnerabilities

CVE-2024-22013 [MEDIUM] CVE-2024-22013: U-Boot environment is read from unauthenticated partition. U-Boot environment is read from unauthenticated partition.

CVE-2024-22004 [CRITICAL] CWE-125 CVE-2024-22004: Due to length check, an attacker with privilege access on a Linux Nonsecure operating system can tri Due to length check, an attacker with privilege access on a Linux Nonsecure operating system can trigger a vulnerability and leak the secure memory from the Trusted Application

CVE-2023-2626 [HIGH] CWE-287 CVE-2023-2626: There exists an authentication bypass vulnerability in OpenThread border router devices and implemen There exists an authentication bypass vulnerability in OpenThread border router devices and implementations. This issue allows unauthenticated nodes to craft radio frames using “Key ID Mode 2”: a special mode using a static encryption key to bypass security checks, resulting in arbitrary IP packets being allowed on the Thread network. This provides a pa