CVEvulnerability

CVE-2023-1750

7.1 HIGH Published 2023-04-04 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-04-04
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
CVSS 3.1 ([email protected])
7.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Weaknesses
CWE-639

Description

The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could retrieve device history, set device settings, and retrieve device information.

Affected configurations

• getnexx nxal-100 firmware (<= nxal100v-p1-9-1) • getnexx nxg-100b firmware (<= nxg100bv-p3-4-1) • getnexx nxpg-100w firmware (<= nxpg100cv4-0-0) • getnexx nxg-200 firmware (<= nxg200v-p3-4-1)

Related

Weakness · CWE (1)

  • CWE-639 Authorization Bypass Through User-Controlled Key weakness

References