Vendor
Naxclow
7 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Critical 9.8
Naxclow IoT Platform Use of hard-coded cryptographic key
Naxclow devices use a uniform request-signing scheme based on a hard-coded, platform-wide salt embedded in every firmware image. Once this salt is recovered from any device, an attacker can generate valid signatures for arbitrary device or account operations …