Lucene search
HistoryApr 04, 2023 - 5:15 p.m.
CVE-2023-1750
cve-2023-1750
nexx smart home
access control
device history
device settings
device information
CVSS3
7.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
AI Score
7.2
Confidence
High
EPSS
0.001
Percentile
27.6%
The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could retrieve device history, set device settings, and retrieve device information.
Affected configurations
Node
getnexxnxal-100_firmwareRange≤nxal100v-p1-9-1
getnexxnxal-100Match-
Node
getnexxnxg-100b_firmwareRange≤nxg100bv-p3-4-1
getnexxnxg-100bMatch-
Node
getnexxnxpg-100w_firmwareRange≤nxpg100cv4-0-0
getnexxnxpg-100wMatch-
Node
getnexxnxg-200_firmwareRange≤nxg200v-p3-4-1
getnexxnxg-200Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| getnexx | nxal-100_firmware | * | cpe:2.3:o:getnexx:nxal-100_firmware:*:*:*:*:*:*:*:* |
| getnexx | nxal-100 | - | cpe:2.3:h:getnexx:nxal-100:-:*:*:*:*:*:*:* |
| getnexx | nxg-100b_firmware | * | cpe:2.3:o:getnexx:nxg-100b_firmware:*:*:*:*:*:*:*:* |
| getnexx | nxg-100b | - | cpe:2.3:h:getnexx:nxg-100b:-:*:*:*:*:*:*:* |
| getnexx | nxpg-100w_firmware | * | cpe:2.3:o:getnexx:nxpg-100w_firmware:*:*:*:*:*:*:*:* |
| getnexx | nxpg-100w | - | cpe:2.3:h:getnexx:nxpg-100w:-:*:*:*:*:*:*:* |
| getnexx | nxg-200_firmware | * | cpe:2.3:o:getnexx:nxg-200_firmware:*:*:*:*:*:*:*:* |
| getnexx | nxg-200 | - | cpe:2.3:h:getnexx:nxg-200:-:*:*:*:*:*:*:* |
Related
prion
prion
Information disclosure
2023-04-04 17:15:00
cve
cve
CVE-2023-1750
2023-04-04 17:15:07
cvelist
cvelist
CVE-2023-1750 CVE-2023-1750
2023-04-04 16:52:59
ics
ics
Nexx Smart Home Device
2023-04-04 12:00:00
CVSS3
7.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
AI Score
7.2
Confidence
High
EPSS
0.001
Percentile
27.6%
Related for NVD:CVE-2023-1750