TI-2023-01641 CVE-2023-1748 · GHSA-jj5g-444x-7r89
Hard-coded credentials in Nexx Smart Alarm NXAL-100
Priority MEDIUM 50
The listed versions of Nexx Smart Home devices use hard-coded credentials.
Nexx
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Nexx records in CISA KEVNo Nexx vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records in Nxg-200 Firmware · all components
TI-2023-01644 CVE-2023-1751 · GHSA-8j4q-8455-qxw3
The listed versions of Nexx Smart Home devices use a WebSocket server that does not…
Priority MEDIUM 40
The listed versions of Nexx Smart Home devices use a WebSocket server that does not validate if the bearer token in the Authorization header belongs to the device attempting to associate.
TI-2023-01645 CVE-2023-1752 · GHSA-mr82-9g27-qr4x
Improper authentication in Nexx Smart Alarm NXAL-100
Priority LOW 36
The listed versions of Nexx Smart Home devices could allow any user to register an already registered alarm or associated device with only the device’s MAC address.
TI-2023-01643 CVE-2023-1750 · GHSA-v2qf-mx28-p27w
Authorization bypass in Nexx Smart Alarm NXAL-100
Priority LOW 32
The listed versions of Nexx Smart Home devices lack proper access control when executing actions.
TI-2023-01642 CVE-2023-1749 · GHSA-83x8-hvhg-cvg7
Authorization bypass in Nexx Smart Alarm NXAL-100
Priority LOW 29
The listed versions of Nexx Smart Home devices lack proper access control when executing actions.