Description
The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could send API requests that the affected devices would execute.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Nexx Smart Alarm NXAL-100
0 to ≤ nxal100v-p1-9-1affected
Nexx Smart Plug NXPG-100W
0 to ≤ nxpg100cv4-0-0affected
Nexx Garage Door Controller NXG-100B, NXG-200
0 to ≤ nxg200v-p3-4-1affected