Getnexx Nxg-100b Firmware
5 CVEs affecting Getnexx Nxg-100b Firmware. Latest disclosed: 2023-04-04. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-1748 | Critical | 9.3 | 2023-04-04 | The listed versions of Nexx Smart Home devices use hard-coded credentials. An attacker with unauthenticated access to the Nexx Home mobile application or the a… |
CVE-2023-1752 | High | 8.1 | 2023-04-04 | The listed versions of Nexx Smart Home devices could allow any user to register an already registered alarm or associated device with only the device’s MAC add… |
CVE-2023-1751 | High | 7.5 | 2023-04-04 | The listed versions of Nexx Smart Home devices use a WebSocket server that does not validate if the bearer token in the Authorization header belongs to the dev… |
CVE-2023-1750 | High | 7.1 | 2023-04-04 | The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could retrieve dev… |
CVE-2023-1749 | Medium | 6.5 | 2023-04-04 | The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could send API req… |