CVE-2023-1750

🗓️ 04 Apr 2023 16:52:59Reported by icscertType

The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could retrieve device history, set device settings, and retrieve device information

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2023-1750	4 Apr 202320:40	–	circl
CNNVD	多款Nexx产品安全漏洞	4 Apr 202300:00	–	cnnvd
Cvelist	CVE-2023-1750 CVE-2023-1750	4 Apr 202316:52	–	cvelist
EUVD	EUVD-2023-23971	3 Oct 202520:07	–	euvd
ICS	Nexx Smart Home Device	4 Apr 202317:20	–	ics
NVD	CVE-2023-1750	4 Apr 202317:15	–	nvd
Prion	Information disclosure	4 Apr 202317:15	–	prion
RedhatCVE	CVE-2023-1750	23 May 202503:01	–	redhatcve
Vulnrichment	CVE-2023-1750 CVE-2023-1750	4 Apr 202316:52	–	vulnrichment

NVD

Vulners

Node

getnexx nxal-100_firmwareRange≤nxal100v-p1-9-1

AND

getnexx nxal-100Match-

Node

getnexx nxg-100b_firmwareRange≤nxg100bv-p3-4-1

AND

getnexx nxg-100bMatch-

Node

getnexx nxpg-100w_firmwareRange≤nxpg100cv4-0-0

AND

getnexx nxpg-100wMatch-

Node

getnexx nxg-200_firmwareRange≤nxg200v-p3-4-1

AND

getnexx nxg-200Match-

[
  {
    "vendor": "Nexx",
    "product": "Smart Alarm NXAL-100",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThanOrEqual": "nxal100v-p1-9-1",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Nexx",
    "product": "Smart Plug NXPG-100W",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThanOrEqual": "nxpg100cv4-0-0",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Nexx",
    "product": "Garage Door Controller NXG-100B, NXG-200",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThanOrEqual": "nxg200v-p3-4-1",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-094-01

21 Nov 2024 07:39Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.1

EPSS0.00197

SSVC

CWE-639