← Database

CVE-2023-1750

HIGH CVSS: 7.1 Published: 2023-04-04 Modified: 2026-06-17

Description

The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could retrieve device history, set device settings, and retrieve device information.

Affected Platforms

Getnexx Nxg-100B FirmwareGetnexx Nxg-200 FirmwareGetnexx Nxal-100 FirmwareGetnexx Nxpg-100W FirmwareGetnexx Nxal-100Getnexx Nxg-200Getnexx Nxg-100BGetnexx Nxpg-100W

Weakness Type

CWE-639

References