CVE-2023-1751

🗓️ 04 Apr 2023 16:54:06Reported by icscertType

Nexx Smart Home devices WebSocket server doesn't validate bearer token, posing security risk

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2023-1751	4 Apr 202320:40	–	circl
CNNVD	多款Nexx产品安全漏洞	4 Apr 202300:00	–	cnnvd
Cvelist	CVE-2023-1751 CVE-2023-1751	4 Apr 202316:54	–	cvelist
EUVD	EUVD-2023-23972	3 Oct 202520:07	–	euvd
ICS	Nexx Smart Home Device	4 Apr 202317:20	–	ics
NVD	CVE-2023-1751	4 Apr 202317:15	–	nvd
OSV	CVE-2023-1751	4 Apr 202317:15	–	osv
Prion	Authorization	4 Apr 202317:15	–	prion
Positive Technologies	PT-2023-2622 · Nexx · Nexx Garage Door Controller +3	4 Apr 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-1751	23 May 202503:01	–	redhatcve

NVD

Vulners

Node

getnexx nxal-100_firmwareRange≤nxal100v-p1-9-1

AND

getnexx nxal-100Match-

Node

getnexx nxg-100b_firmwareRange≤nxg100bv-p3-4-1

AND

getnexx nxg-100bMatch-

Node

getnexx nxpg-100w_firmwareRange≤nxpg100cv4-0-0

AND

getnexx nxpg-100wMatch-

Node

getnexx nxg-200_firmwareRange≤nxg200v-p3-4-1

AND

getnexx nxg-200Match-

[
  {
    "vendor": "Nexx",
    "product": "Smart Alarm NXAL-100",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThanOrEqual": "nxal100v-p1-9-1",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Nexx",
    "product": "Smart Plug NXPG-100W",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThanOrEqual": "nxpg100cv4-0-0",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Nexx",
    "product": "Garage Door Controller NXG-100B, NXG-200",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThanOrEqual": "nxg200v-p3-4-1",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-094-01

21 Nov 2024 07:39Current

6Medium risk

Vulners AI Score6

CVSS 3.15.3 - 7.5

EPSS0.00274

SSVC