CVEvulnerability

CVE-2023-1752

4.3 MEDIUM Published 2023-04-04 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-04-04
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-287

Description

The listed versions of Nexx Smart Home devices could allow any user to register an already registered alarm or associated device with only the device’s MAC address.

Affected configurations

• getnexx nxal-100 firmware (<= nxal100v-p1-9-1) • getnexx nxg-100b firmware (<= nxg100bv-p3-4-1) • getnexx nxpg-100w firmware (<= nxpg100cv4-0-0) • getnexx nxg-200 firmware (<= nxg200v-p3-4-1)

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References