CVE-2023-1752

🗓️ 04 Apr 2023 16:55:40Reported by icscertType

The Nexx Smart Home devices in certain versions allow unregistered users to register alarms with only the MAC address

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2023-1752	4 Apr 202320:37	–	circl
CNNVD	多款Nexx产品授权问题漏洞	4 Apr 202300:00	–	cnnvd
Cvelist	CVE-2023-1752 CVE-2023-1752	4 Apr 202316:55	–	cvelist
EUVD	EUVD-2023-23973	3 Oct 202520:07	–	euvd
ICS	Nexx Smart Home Device	4 Apr 202317:20	–	ics
NVD	CVE-2023-1752	4 Apr 202317:15	–	nvd
OSV	CVE-2023-1752	4 Apr 202317:15	–	osv
Prion	Design/Logic Flaw	4 Apr 202317:15	–	prion
Positive Technologies	PT-2023-2623 · Nexx · Nexx Garage Door Controller +3	4 Apr 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-1752	23 May 202503:01	–	redhatcve

NVD

Vulners

Node

getnexx nxal-100_firmwareRange≤nxal100v-p1-9-1

AND

getnexx nxal-100Match-

Node

getnexx nxg-100b_firmwareRange≤nxg100bv-p3-4-1

AND

getnexx nxg-100bMatch-

Node

getnexx nxpg-100w_firmwareRange≤nxpg100cv4-0-0

AND

getnexx nxpg-100wMatch-

Node

getnexx nxg-200_firmwareRange≤nxg200v-p3-4-1

AND

getnexx nxg-200Match-

[
  {
    "vendor": "Nexx",
    "product": "Smart Alarm NXAL-100",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThanOrEqual": "nxal100v-p1-9-1",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Nexx",
    "product": "Smart Plug NXPG-100W",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThanOrEqual": "nxpg100cv4-0-0",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Nexx",
    "product": "Garage Door Controller NXG-100B, NXG-200",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThanOrEqual": "nxg200v-p3-4-1",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-094-01

21 Nov 2024 07:39Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.14.3 - 8.1

EPSS0.00215

SSVC

CWE-287