← Database

CVE-2023-1749

MEDIUM CVSS: 6.5 Published: 2023-04-04 Modified: 2026-06-17

Description

The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could send API requests that the affected devices would execute.

Affected Platforms

Getnexx Nxg-100B FirmwareGetnexx Nxg-200 FirmwareGetnexx Nxal-100 FirmwareGetnexx Nxpg-100W FirmwareGetnexx Nxal-100Getnexx Nxg-200Getnexx Nxg-100BGetnexx Nxpg-100W

Weakness Type

CWE-639

References