CVE-2023-1752

The listed versions of Nexx Smart Home devices could allow any user to register an already registered alarm or associated device with only the device’s MAC address.

Score

CVSS 3.1 8.1 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2023-04-04

Last modified

2025-01-16

Weaknesses

CWE-287

Affected products

• Nxal-100 Firmware (Getnexx)
• Nxg-100b Firmware (Getnexx)
• Nxg-200 Firmware (Getnexx)
• Nxpg-100w Firmware (Getnexx)
• Garage Door Controller Nxg-100b (Nexx)
• Nxg-200 (Nexx)
• Smart Alarm Nxal-100 (Nexx)
• Smart Plug Nxpg-100w (Nexx)

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01