Skip to content
OpenAdvisories

Vendor

Naxclow

7 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8

    Naxclow IoT Platform Use of hard-coded cryptographic key

    Naxclow devices use a uniform request-signing scheme based on a hard-coded, platform-wide salt embedded in every firmware image. Once this salt is recovered from any device, an attacker can generate valid signatures for arbitrary device or account operations …