Vendor

Nexx

5 known vulnerabilities.

Products

Smart Alarm NXAL-100 5 Smart Plug NXPG-100W 5 Garage Door Controller NXG-100B, NXG-200 5

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

High 8.1

CVE-2023-1752

CVE-2023-1752

The listed versions of Nexx Smart Home devices could allow any user to register an already registered alarm or associated device with only the device’s MAC address.

Nexx Smart Plug NXPG-100W Smart Alarm NXAL-100 Garage Door Controller NXG-100B, NXG-200

Apr 4, 2023
High 7.5

CVE-2023-1751

CVE-2023-1751

The listed versions of Nexx Smart Home devices use a WebSocket server that does not validate if the bearer token in the Authorization header belongs to the device attempting to associate. This could allow any authorized user to receive alarm information and s…

Nexx Smart Alarm NXAL-100 Garage Door Controller NXG-100B, NXG-200 Smart Plug NXPG-100W

Apr 4, 2023
High 7.1

CVE-2023-1750

CVE-2023-1750

The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could retrieve device history, set device settings, and retrieve device information.

Nexx Garage Door Controller NXG-100B, NXG-200 Smart Plug NXPG-100W Smart Alarm NXAL-100

Apr 4, 2023