Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-42932 EUVD-2026-36532GHSA-x87p-mc42-f63g

Naxclow IoT Platform Generation of Predictable Numbers or Identifiers

Published Jun 12, 2026 · Updated Jun 12, 2026 · Assigned by icscert

Description

Naxclow device identifiers use fixed manufacturing prefixes combined with sequential counters, producing a fully predictable and enumerable identifier space. Because the platform also exposes an endpoint that reveals the current identifier high-water mark, the active fleet can be enumerated.

Affected products

VendorProductAffectedFixed
Naxclow Smart Doorbell X3 All —
Naxclow X Smart Home All —
Naxclow V720 All —
Naxclow ix cam All —

Advisories 1

References