CVE-2023-1749 — CVE-2023-1749

Description (CNA)

The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could send API requests that the affected devices would execute.

Affected (CNA)

Vendor / product	Versions
Nexx / Smart Alarm NXAL-100	affected 0 through nxal100v-p1-9-1
Nexx / Smart Plug NXPG-100W	affected 0 through nxpg100cv4-0-0
Nexx / Garage Door Controller NXG-100B, NXG-200	affected 0 through nxg200v-p3-4-1

CWE

No CWE identifiers supplied.

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01

CISA-ADP

No English description supplied.

No references supplied.