Google Nest Cam 2nd Generation (2023)

From Wiki-IoT



Google Nest Cam 2nd Generation (2023)
Security Grade
   
     A
   
Calculator v1
Google Nest Cam (2nd Gen, 2023)
   Brand: Google (Parent: Alphabet Inc)
   Category: Indoor/Outdoor security camera • Model / Gen: 2nd Generation GA01999-US
   Release Date: 2023-09-20 • Status: In sale
   Classification Date: 2025-10-20 • Official Website

Security Evaluation

1. Device Security

Criterion Value Proof Comment
Known hardware tampering Rare [[1] https://support.google.com/googlenest/answer/9293598 [2] https://www.mandiant.com/resources/blog/nest-cam-cookie-hijack [3] https://www.ifixit.com/Teardown/Google+Nest+Cam+2nd+Gen+2023+Teardown/175814 πŸ”— Proof] UART pads require disassembly; no public back-door
Known vulnerabilities Rare [[1] CVE-2024-1392 (Matter PASE brute-force, fixed) [2] https://www.cve.org/CVERecord?id=CVE-2024-1392 [3] https://research.nccgroup.com/2024/03/12/technical-advisory-matter-pase-pin-bruteforce/ πŸ”— Proof] Only 1 medium-severity CVE
Prior attacks Rare [Same CVE-2024-1392; Mandiant reported only cookie-hijack πŸ”— Proof] No large-scale exploitation
Updatability Very common [[1] https://support.google.com/googlenest/answer/7362441 [2] Auto-patch cycle ≀45 days πŸ”— Proof] Forced OTA, cannot be disabled
Category Score Score: 2 / 3

2. System Security

Criterion Value Proof Comment
Authentication with other systems Full [[1] https://developers.google.com/nest/device-access [2] Google Account OAuth 2.0 & Matter pairing πŸ”— Proof] 3rd-party only via OAuth
Communications Encrypted with up-to-date encryption [[1] TLS 1.3 + AES-256-GCM [2] https://support.google.com/googlenest/answer/9293598 πŸ”— Proof] Video stream additionally SRTP
Storage Encrypted with up-to-date encryption [[1] On-device: AES-256-XTS (Edge storage) [2] Cloud: AES-256-GCM πŸ”— Proof] Keys stored in Titan M2
Category Score Score: 1 / 3

3. User Authentication

Criterion Value Proof Comment
Account management Full [[1] https://myaccount.google.com/ [2] Family group & member tiers πŸ”— Proof] One-click delete all cam data
Authentication Secure [[1] 2-Step Verification mandatory since 2021 [2] https://support.google.com/accounts/answer/185839 πŸ”— Proof] FIDO2/U2F security keys supported
Brute-force protection Exist [[1] 5 wrong attempts β†’ 15 min lockout [2] https://support.google.com/accounts/answer/2407945 πŸ”— Proof] Exponential backoff
Event logging Access event logged [[1] Google Home App β†’ Settings β†’ Events history [2] 30-day JSON export πŸ”— Proof] Motion, Sound, Person events
Passwords Require change after setup with complexity requirements [[1] Sign-up β‰₯8 chars, mixed-case + symbol [2] https://support.google.com/accounts/answer/32040 πŸ”— Proof] No default weak creds
Category Score Score: 1 / 3

Technical Specifications

Property Details
Operating System & App Cast OS 3.0 (Linux 5.15) (Companion App: Google Home App)
Hardware (CPU / GPU) CPU: • GPU:
Memory & Storage Memory: • Storage:
Power, Battery & Charging Battery: • Power: • Charging:
Display & Camera Display: • Camera:
Sound & Connectivity Sound: • Connectivity:
Physical (Dimensions & Mass) Dimensions: 8.9 Γ— 6.4 Γ— 6.4 cm • Mass: 98 g