TI-2023-01641 CVE-2023-1748 · GHSA-jj5g-444x-7r89
Hard-coded credentials in Nexx Smart Alarm NXAL-100
Priority MEDIUM 50
The listed versions of Nexx Smart Home devices use hard-coded credentials.
Vulnerabilities
5 records
TI-2023-01645 CVE-2023-1752 · GHSA-mr82-9g27-qr4x
Improper authentication in Nexx Smart Alarm NXAL-100
Priority LOW 36
The listed versions of Nexx Smart Home devices could allow any user to register an already registered alarm or associated device with only the device’s MAC address.
TI-2023-01642 CVE-2023-1749 · GHSA-83x8-hvhg-cvg7
Authorization bypass in Nexx Smart Alarm NXAL-100
Priority LOW 29
The listed versions of Nexx Smart Home devices lack proper access control when executing actions.
TI-2023-01644 CVE-2023-1751 · GHSA-8j4q-8455-qxw3
The listed versions of Nexx Smart Home devices use a WebSocket server that does not…
Priority MEDIUM 40
The listed versions of Nexx Smart Home devices use a WebSocket server that does not validate if the bearer token in the Authorization header belongs to the device attempting to associate.
TI-2023-01643 CVE-2023-1750 · GHSA-v2qf-mx28-p27w
Authorization bypass in Nexx Smart Alarm NXAL-100
Priority LOW 32
The listed versions of Nexx Smart Home devices lack proper access control when executing actions.