← Database

CVE-2023-1748

CRITICAL CVSS: 9.3 Published: 2023-04-04 Modified: 2026-06-17

Description

The listed versions of Nexx Smart Home devices use hard-coded credentials. An attacker with unauthenticated access to the Nexx Home mobile application or the affected firmware could view the credentials and access the MQ Telemetry Server (MQTT) server and the ability to remotely control garage doors or smart plugs for any customer.

Affected Platforms

Getnexx Nxg-100B FirmwareGetnexx Nxg-200 FirmwareGetnexx Nxal-100 FirmwareGetnexx Nxpg-100W FirmwareGetnexx Nxal-100Getnexx Nxg-200Getnexx Nxg-100BGetnexx Nxpg-100W

Weakness Type

CWE-798

References