CVE-2023-39842

Missing encryption in the RFID tag of Digoo DG-HAMB Smart Home Security System v1.0 allows attackers to create a cloned tag via brief physical proximity to the original device...

PT-2023-27128 · Digoo · Digoo Dg-Hamb Smart Home Security System

Name of the Vulnerable Software and Affected Versions: Digoo DG-HAMB Smart Home Security System version 1.0 Description: The issue is related to missing encryption in the RFID tag of the system, allowing attackers to create a cloned tag via brief physical proximity to the original device. This ca...

CVE-2023-31761

Weak security in the transmitter of Blitzwolf BW-IS22 Smart Home Security Alarm v1.0 allows attackers to gain full access to the system via a code replay attack...

CVE-2023-31762

Weak security in the transmitter of Digoo DG-HAMB Smart Home Security System v1.0 allows attackers to gain full access to the system via a code replay attack...

CVE-2023-31762

Weak security in the transmitter of Digoo DG-HAMB Smart Home Security System v1.0 allows attackers to gain full access to the system via a code replay attack...

Code injection

Weak security in the transmitter of Digoo DG-HAMB Smart Home Security System v1.0 allows attackers to gain full access to the system via a code replay attack...

CVE-2023-31761

The CVE-2023-31761 entry concerns the Blitzwolf BW-IS22 Smart Home Security Alarm v1.0. The vulnerable component is the transmitter, where weak transmitter security enables a code replay attack, allowing an attacker to gain full access to the system. The available sources indicate an adjacent att...

PT-2023-23454 · Blitzwolf · Blitzwolf Bw-Is22 Smart Home Security Alarm

Name of the Vulnerable Software and Affected Versions: Blitzwolf BW-IS22 Smart Home Security Alarm version v1.0 Description: The issue is related to weak security in the transmitter, allowing attackers to gain full access to the system via a code replay attack. Recommendations: For Blitzwolf...

Blitzwolf BW-IS22 Smart Home Security Alarm 安全漏洞

The Blitzwolf BW-IS22 Smart Home Security Alarm is a smart home alarm system from Blitzwolf. A security vulnerability exists in the Blitzwolf BW-IS22 Smart Home Security Alarm v1.0 firmware version, which stems from a vulnerability that allows an attacker to gain full access, where the attacker c...

CVE-2023-31761

Weak security in the transmitter of Blitzwolf BW-IS22 Smart Home Security Alarm v1.0 allows attackers to gain full access to the system via a code replay attack...

CVE-2023-31762

Summary: CVE-2023-31762 concerns the Digoo DG-HAMB Smart Home Security System (v1.0) and its transmitter. The core issue is a weak security design in the transmitter that enables a code replay attack, which could let an attacker gain full system access. The affected component is the transmitter; ...

PT-2023-23455 · Digoo · Digoo Dg-Hamb Smart Home Security System

Name of the Vulnerable Software and Affected Versions: Digoo DG-HAMB Smart Home Security System version 1.0 Description: The issue is related to weak security in the transmitter, allowing attackers to gain full access to the system via a code replay attack. Recommendations: For Digoo DG-HAMB Smar...

CVE-2023-31762

Weak security in the transmitter of Digoo DG-HAMB Smart Home Security System v1.0 allows attackers to gain full access to the system via a code replay attack...

Digoo DG-HAMB Smart Home Security System 安全漏洞

The Digoo DG-HAMB Smart Home Security System is a suite of smart home security alarm systems from Digoo. A security vulnerability exists in the Digoo DG-HAMB Smart Home Security System v1.0 firmware version, which stems from a vulnerability that allows an attacker to gain full access, where the...

Are Smart Home Devices Invading Your Privacy?

By Owais Sultan Smart home devices are becoming more and more popular in recent years, promising convenience and automation to enhance… This is a post from HackRead.com Read the original post: Are Smart Home Devices Invading Your Privacy?...

Nexx Smart Home Device

1. EXECUTIVE SUMMARY CVSS v3 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Nexx Equipment: Garage Door Controller, Smart Plug, Smart Alarm Vulnerabilities: Use of Hard-coded Credentials, Authorization Bypass through User-controlled Key, Improper Input Validation, Improper...

CVE-2023-1751

The listed versions of Nexx Smart Home devices use a WebSocket server that does not validate if the bearer token in the Authorization header belongs to the device attempting to associate. This could allow any authorized user to receive alarm information and signals meant for other devices which...

CVE-2023-1750

The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could retrieve device history, set device settings, and retrieve device information...

CVE-2023-1752

The listed versions of Nexx Smart Home devices could allow any user to register an already registered alarm or associated device with only the device’s MAC address...

CVE-2023-1749

The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could send API requests that the affected devices would execute...