Description
The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could retrieve device history, set device settings, and retrieve device information.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Nexx Smart Alarm NXAL-100
0 to ≤ nxal100v-p1-9-1affected
Nexx Smart Plug NXPG-100W
0 to ≤ nxpg100cv4-0-0affected
Nexx Garage Door Controller NXG-100B, NXG-200
0 to ≤ nxg200v-p3-4-1affected