| Google Nest Hub (2nd Gen)
|
|
Security Grade
Calculator v
|
Google Nest Hub (2nd Gen)
Release Date: 2021-03-30 • Status: In sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
π Proof
|
Secure Boot bypass via malicious USB mass storage (Basse 2022) requires physical access.
|
| Known vulnerabilities
|
Rare
|
π Proof
|
CVE-2023-2626 OpenThread auth bypass (7.5); 2022 bulletins list RCE/EoP.
|
| Prior attacks
|
None
|
π Proof
|
Secure Boot work was research-grade; no mass exploitation.
|
| Updatability
|
Very common
|
π Proof
|
Google auto-updates firmware.
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Partial
|
π Proof
|
OpenThread border router auth bypass (CVE-2023-2626).
|
| Communications
|
Encrypted with up-to-date encryption
|
π Proof
|
Cloud and local use TLS.
|
| Storage
|
Encrypted with up-to-date encryption
|
π Proof
|
Internal storage encrypted.
|
| Category Score
|
Score: 2 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Full
|
π Proof
|
Google account management.
|
| Authentication
|
Secure
|
π Proof
|
Google account authentication.
|
| Brute-force protection
|
Exist
|
π Proof
|
Google login rate limiting.
|
| Event logging
|
Access event logged
|
π Proof
|
Google account activity logged.
|
| Passwords
|
Require change after setup with complexity requirements
|
π Proof
|
Google password complexity.
|
| Category Score
|
Score: 1 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Cast OS (Fuchsia-based) (Companion App: Google Home app)
|
| Hardware (CPU / GPU)
|
CPU: • GPU:
|
| Memory & Storage
|
Memory: • Storage: Internal flash
|
| Power, Battery & Charging
|
Battery: • Power: AC adapter • Charging:
|
| Display & Camera
|
Display: • Camera:
|
| Sound & Connectivity
|
Sound: • Connectivity: Wi-Fi, Bluetooth, Thread
|
| Physical (Dimensions & Mass)
|
Dimensions: • Mass:
|
Nest Hub 2nd Gen has a strong account layer and automatic updates. Its known issues (Secure Boot bypass, OpenThread auth bypass) require physical access or specific network setups, so overall risk is low.