Search
Find a vulnerability
Search criteria
10 vulnerabilities by Nexx
CVE-2023-1752 (GCVE-0-2023-1752)
Vulnerability from nvd – Published: 2023-04-04 16:55 – Updated: 2025-01-16 21:36
VLAI
Title
CVE-2023-1752
Summary
The listed versions of Nexx Smart Home devices could allow any user to register an already registered alarm or associated device with only the device’s MAC address.
Severity
8.1 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
1 reference
Impacted products
3 products
| Vendor | Product | Version | |
|---|---|---|---|
| Nexx | Smart Alarm NXAL-100 |
Affected:
0 , ≤ nxal100v-p1-9-1
(custom)
|
|
| Nexx | Smart Plug NXPG-100W |
Affected:
0 , ≤ nxpg100cv4-0-0
(custom)
|
|
| Nexx | Garage Door Controller NXG-100B, NXG-200 |
Affected:
0 , ≤ nxg200v-p3-4-1
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T05:57:24.870Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-1752",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-01-16T20:21:26.614734Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-01-16T21:36:28.116Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Smart Alarm NXAL-100",
"vendor": "Nexx",
"versions": [
{
"lessThanOrEqual": "nxal100v-p1-9-1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Smart Plug NXPG-100W",
"vendor": "Nexx",
"versions": [
{
"lessThanOrEqual": "nxpg100cv4-0-0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Garage Door Controller NXG-100B, NXG-200",
"vendor": "Nexx",
"versions": [
{
"lessThanOrEqual": "nxg200v-p3-4-1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The listed versions of Nexx Smart Home devices could allow any user to register an already registered alarm or associated device with only the device\u2019s MAC address."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-287 Improper Authentication",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-04-04T16:55:40.229Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "CVE-2023-1752",
"x_generator": {
"engine": "VINCE 2.0.7",
"env": "prod",
"origin": "https://cveawg.mitre.org/api/cve/CVE-2023-1752"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2023-1752",
"datePublished": "2023-04-04T16:55:40.229Z",
"dateReserved": "2023-03-30T20:05:30.210Z",
"dateUpdated": "2025-01-16T21:36:28.116Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-1751 (GCVE-0-2023-1751)
Vulnerability from nvd – Published: 2023-04-04 16:54 – Updated: 2025-01-16 21:36
VLAI
Title
CVE-2023-1751
Summary
The listed versions of Nexx Smart Home devices use a WebSocket server that does not validate if the bearer token in the Authorization header belongs to the device attempting to associate. This could allow any authorized user to receive alarm information and signals meant for other devices which leak a deviceId.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
1 reference
Impacted products
3 products
| Vendor | Product | Version | |
|---|---|---|---|
| Nexx | Smart Alarm NXAL-100 |
Affected:
0 , ≤ nxal100v-p1-9-1
(custom)
|
|
| Nexx | Smart Plug NXPG-100W |
Affected:
0 , ≤ nxpg100cv4-0-0
(custom)
|
|
| Nexx | Garage Door Controller NXG-100B, NXG-200 |
Affected:
0 , ≤ nxg200v-p3-4-1
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T05:57:25.083Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-1751",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-01-16T20:55:59.191042Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-01-16T21:36:44.458Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Smart Alarm NXAL-100",
"vendor": "Nexx",
"versions": [
{
"lessThanOrEqual": "nxal100v-p1-9-1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Smart Plug NXPG-100W",
"vendor": "Nexx",
"versions": [
{
"lessThanOrEqual": "nxpg100cv4-0-0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Garage Door Controller NXG-100B, NXG-200",
"vendor": "Nexx",
"versions": [
{
"lessThanOrEqual": "nxg200v-p3-4-1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The listed versions of Nexx Smart Home devices use a WebSocket server that does not validate if the bearer token in the Authorization header belongs to the device attempting to associate. This could allow any authorized user to receive alarm information and signals meant for other devices which leak a deviceId."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-20 Improper Input Validation",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-04-04T16:54:06.709Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "CVE-2023-1751",
"x_generator": {
"engine": "VINCE 2.0.7",
"env": "prod",
"origin": "https://cveawg.mitre.org/api/cve/CVE-2023-1751"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2023-1751",
"datePublished": "2023-04-04T16:54:06.709Z",
"dateReserved": "2023-03-30T20:04:29.870Z",
"dateUpdated": "2025-01-16T21:36:44.458Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-1750 (GCVE-0-2023-1750)
Vulnerability from nvd – Published: 2023-04-04 16:52 – Updated: 2025-01-16 21:36
VLAI
Title
CVE-2023-1750
Summary
The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could retrieve device history, set device settings, and retrieve device information.
Severity
7.1 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
1 reference
Impacted products
3 products
| Vendor | Product | Version | |
|---|---|---|---|
| Nexx | Smart Alarm NXAL-100 |
Affected:
0 , ≤ nxal100v-p1-9-1
(custom)
|
|
| Nexx | Smart Plug NXPG-100W |
Affected:
0 , ≤ nxpg100cv4-0-0
(custom)
|
|
| Nexx | Garage Door Controller NXG-100B, NXG-200 |
Affected:
0 , ≤ nxg200v-p3-4-1
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T05:57:25.263Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-1750",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-01-16T20:21:32.555522Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-01-16T21:36:53.482Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Smart Alarm NXAL-100",
"vendor": "Nexx",
"versions": [
{
"lessThanOrEqual": "nxal100v-p1-9-1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Smart Plug NXPG-100W",
"vendor": "Nexx",
"versions": [
{
"lessThanOrEqual": "nxpg100cv4-0-0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Garage Door Controller NXG-100B, NXG-200",
"vendor": "Nexx",
"versions": [
{
"lessThanOrEqual": "nxg200v-p3-4-1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could retrieve device history, set device settings, and retrieve device information."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-639 Authorization Bypass Through User-Controlled Key",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-04-04T16:52:59.453Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "CVE-2023-1750",
"x_generator": {
"engine": "VINCE 2.0.7",
"env": "prod",
"origin": "https://cveawg.mitre.org/api/cve/CVE-2023-1750"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2023-1750",
"datePublished": "2023-04-04T16:52:59.453Z",
"dateReserved": "2023-03-30T20:02:38.794Z",
"dateUpdated": "2025-01-16T21:36:53.482Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-1749 (GCVE-0-2023-1749)
Vulnerability from nvd – Published: 2023-04-04 16:54 – Updated: 2025-01-16 21:36
VLAI
Title
CVE-2023-1749
Summary
The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could send API requests that the affected devices would execute.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
1 reference
Impacted products
3 products
| Vendor | Product | Version | |
|---|---|---|---|
| Nexx | Smart Alarm NXAL-100 |
Affected:
0 , ≤ nxal100v-p1-9-1
(custom)
|
|
| Nexx | Smart Plug NXPG-100W |
Affected:
0 , ≤ nxpg100cv4-0-0
(custom)
|
|
| Nexx | Garage Door Controller NXG-100B, NXG-200 |
Affected:
0 , ≤ nxg200v-p3-4-1
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T05:57:25.237Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-1749",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-01-16T20:21:29.385029Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-01-16T21:36:36.545Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Smart Alarm NXAL-100",
"vendor": "Nexx",
"versions": [
{
"lessThanOrEqual": "nxal100v-p1-9-1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Smart Plug NXPG-100W",
"vendor": "Nexx",
"versions": [
{
"lessThanOrEqual": "nxpg100cv4-0-0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Garage Door Controller NXG-100B, NXG-200",
"vendor": "Nexx",
"versions": [
{
"lessThanOrEqual": "nxg200v-p3-4-1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could send API requests that the affected devices would execute."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-639 Authorization Bypass Through User-Controlled Key",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-04-04T16:54:46.115Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "CVE-2023-1749",
"x_generator": {
"engine": "VINCE 2.0.7",
"env": "prod",
"origin": "https://cveawg.mitre.org/api/cve/CVE-2023-1749"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2023-1749",
"datePublished": "2023-04-04T16:54:46.115Z",
"dateReserved": "2023-03-30T20:02:11.282Z",
"dateUpdated": "2025-01-16T21:36:36.545Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-1748 (GCVE-0-2023-1748)
Vulnerability from nvd – Published: 2023-04-04 16:56 – Updated: 2025-01-16 21:36
VLAI
Title
CVE-2023-1748
Summary
The listed versions of Nexx Smart Home devices use hard-coded credentials. An attacker with unauthenticated access to the Nexx Home mobile application or the affected firmware could view the credentials and access the MQ Telemetry Server (MQTT) server and the ability to remotely control garage doors or smart plugs for any customer.
Severity
9.3 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
1 reference
Impacted products
3 products
| Vendor | Product | Version | |
|---|---|---|---|
| Nexx | Smart Alarm NXAL-100 |
Affected:
0 , ≤ nxal100v-p1-9-1
(custom)
|
|
| Nexx | Smart Plug NXPG-100W |
Affected:
0 , ≤ nxpg100cv4-0-0
(custom)
|
|
| Nexx | Garage Door Controller NXG-100B, NXG-200 |
Affected:
0 , ≤ nxg200v-p3-4-1
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T05:57:25.127Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-1748",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-01-16T20:55:55.953511Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-01-16T21:36:21.307Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Smart Alarm NXAL-100",
"vendor": "Nexx",
"versions": [
{
"lessThanOrEqual": "nxal100v-p1-9-1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Smart Plug NXPG-100W",
"vendor": "Nexx",
"versions": [
{
"lessThanOrEqual": "nxpg100cv4-0-0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Garage Door Controller NXG-100B, NXG-200",
"vendor": "Nexx",
"versions": [
{
"lessThanOrEqual": "nxg200v-p3-4-1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The listed versions of Nexx Smart Home devices use hard-coded credentials. An attacker with unauthenticated access to the Nexx Home mobile application or the affected firmware could view the credentials and access the MQ Telemetry Server (MQTT) server and the ability to remotely control garage doors or smart plugs for any customer."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-798 Use of Hard-coded Credentials",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-04-04T16:56:27.851Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "CVE-2023-1748",
"x_generator": {
"engine": "VINCE 2.0.7",
"env": "prod",
"origin": "https://cveawg.mitre.org/api/cve/CVE-2023-1748"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2023-1748",
"datePublished": "2023-04-04T16:56:27.851Z",
"dateReserved": "2023-03-30T20:01:18.851Z",
"dateUpdated": "2025-01-16T21:36:21.307Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-1748 (GCVE-0-2023-1748)
Vulnerability from cvelistv5 – Published: 2023-04-04 16:56 – Updated: 2025-01-16 21:36
VLAI
Title
CVE-2023-1748
Summary
The listed versions of Nexx Smart Home devices use hard-coded credentials. An attacker with unauthenticated access to the Nexx Home mobile application or the affected firmware could view the credentials and access the MQ Telemetry Server (MQTT) server and the ability to remotely control garage doors or smart plugs for any customer.
Severity
9.3 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
1 reference
Impacted products
3 products
| Vendor | Product | Version | |
|---|---|---|---|
| Nexx | Smart Alarm NXAL-100 |
Affected:
0 , ≤ nxal100v-p1-9-1
(custom)
|
|
| Nexx | Smart Plug NXPG-100W |
Affected:
0 , ≤ nxpg100cv4-0-0
(custom)
|
|
| Nexx | Garage Door Controller NXG-100B, NXG-200 |
Affected:
0 , ≤ nxg200v-p3-4-1
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T05:57:25.127Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-1748",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-01-16T20:55:55.953511Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-01-16T21:36:21.307Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Smart Alarm NXAL-100",
"vendor": "Nexx",
"versions": [
{
"lessThanOrEqual": "nxal100v-p1-9-1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Smart Plug NXPG-100W",
"vendor": "Nexx",
"versions": [
{
"lessThanOrEqual": "nxpg100cv4-0-0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Garage Door Controller NXG-100B, NXG-200",
"vendor": "Nexx",
"versions": [
{
"lessThanOrEqual": "nxg200v-p3-4-1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The listed versions of Nexx Smart Home devices use hard-coded credentials. An attacker with unauthenticated access to the Nexx Home mobile application or the affected firmware could view the credentials and access the MQ Telemetry Server (MQTT) server and the ability to remotely control garage doors or smart plugs for any customer."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-798 Use of Hard-coded Credentials",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-04-04T16:56:27.851Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "CVE-2023-1748",
"x_generator": {
"engine": "VINCE 2.0.7",
"env": "prod",
"origin": "https://cveawg.mitre.org/api/cve/CVE-2023-1748"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2023-1748",
"datePublished": "2023-04-04T16:56:27.851Z",
"dateReserved": "2023-03-30T20:01:18.851Z",
"dateUpdated": "2025-01-16T21:36:21.307Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-1752 (GCVE-0-2023-1752)
Vulnerability from cvelistv5 – Published: 2023-04-04 16:55 – Updated: 2025-01-16 21:36
VLAI
Title
CVE-2023-1752
Summary
The listed versions of Nexx Smart Home devices could allow any user to register an already registered alarm or associated device with only the device’s MAC address.
Severity
8.1 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
1 reference
Impacted products
3 products
| Vendor | Product | Version | |
|---|---|---|---|
| Nexx | Smart Alarm NXAL-100 |
Affected:
0 , ≤ nxal100v-p1-9-1
(custom)
|
|
| Nexx | Smart Plug NXPG-100W |
Affected:
0 , ≤ nxpg100cv4-0-0
(custom)
|
|
| Nexx | Garage Door Controller NXG-100B, NXG-200 |
Affected:
0 , ≤ nxg200v-p3-4-1
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T05:57:24.870Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-1752",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-01-16T20:21:26.614734Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-01-16T21:36:28.116Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Smart Alarm NXAL-100",
"vendor": "Nexx",
"versions": [
{
"lessThanOrEqual": "nxal100v-p1-9-1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Smart Plug NXPG-100W",
"vendor": "Nexx",
"versions": [
{
"lessThanOrEqual": "nxpg100cv4-0-0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Garage Door Controller NXG-100B, NXG-200",
"vendor": "Nexx",
"versions": [
{
"lessThanOrEqual": "nxg200v-p3-4-1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The listed versions of Nexx Smart Home devices could allow any user to register an already registered alarm or associated device with only the device\u2019s MAC address."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-287 Improper Authentication",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-04-04T16:55:40.229Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "CVE-2023-1752",
"x_generator": {
"engine": "VINCE 2.0.7",
"env": "prod",
"origin": "https://cveawg.mitre.org/api/cve/CVE-2023-1752"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2023-1752",
"datePublished": "2023-04-04T16:55:40.229Z",
"dateReserved": "2023-03-30T20:05:30.210Z",
"dateUpdated": "2025-01-16T21:36:28.116Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-1749 (GCVE-0-2023-1749)
Vulnerability from cvelistv5 – Published: 2023-04-04 16:54 – Updated: 2025-01-16 21:36
VLAI
Title
CVE-2023-1749
Summary
The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could send API requests that the affected devices would execute.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
1 reference
Impacted products
3 products
| Vendor | Product | Version | |
|---|---|---|---|
| Nexx | Smart Alarm NXAL-100 |
Affected:
0 , ≤ nxal100v-p1-9-1
(custom)
|
|
| Nexx | Smart Plug NXPG-100W |
Affected:
0 , ≤ nxpg100cv4-0-0
(custom)
|
|
| Nexx | Garage Door Controller NXG-100B, NXG-200 |
Affected:
0 , ≤ nxg200v-p3-4-1
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T05:57:25.237Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-1749",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-01-16T20:21:29.385029Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-01-16T21:36:36.545Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Smart Alarm NXAL-100",
"vendor": "Nexx",
"versions": [
{
"lessThanOrEqual": "nxal100v-p1-9-1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Smart Plug NXPG-100W",
"vendor": "Nexx",
"versions": [
{
"lessThanOrEqual": "nxpg100cv4-0-0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Garage Door Controller NXG-100B, NXG-200",
"vendor": "Nexx",
"versions": [
{
"lessThanOrEqual": "nxg200v-p3-4-1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could send API requests that the affected devices would execute."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-639 Authorization Bypass Through User-Controlled Key",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-04-04T16:54:46.115Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "CVE-2023-1749",
"x_generator": {
"engine": "VINCE 2.0.7",
"env": "prod",
"origin": "https://cveawg.mitre.org/api/cve/CVE-2023-1749"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2023-1749",
"datePublished": "2023-04-04T16:54:46.115Z",
"dateReserved": "2023-03-30T20:02:11.282Z",
"dateUpdated": "2025-01-16T21:36:36.545Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-1751 (GCVE-0-2023-1751)
Vulnerability from cvelistv5 – Published: 2023-04-04 16:54 – Updated: 2025-01-16 21:36
VLAI
Title
CVE-2023-1751
Summary
The listed versions of Nexx Smart Home devices use a WebSocket server that does not validate if the bearer token in the Authorization header belongs to the device attempting to associate. This could allow any authorized user to receive alarm information and signals meant for other devices which leak a deviceId.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
1 reference
Impacted products
3 products
| Vendor | Product | Version | |
|---|---|---|---|
| Nexx | Smart Alarm NXAL-100 |
Affected:
0 , ≤ nxal100v-p1-9-1
(custom)
|
|
| Nexx | Smart Plug NXPG-100W |
Affected:
0 , ≤ nxpg100cv4-0-0
(custom)
|
|
| Nexx | Garage Door Controller NXG-100B, NXG-200 |
Affected:
0 , ≤ nxg200v-p3-4-1
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T05:57:25.083Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-1751",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-01-16T20:55:59.191042Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-01-16T21:36:44.458Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Smart Alarm NXAL-100",
"vendor": "Nexx",
"versions": [
{
"lessThanOrEqual": "nxal100v-p1-9-1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Smart Plug NXPG-100W",
"vendor": "Nexx",
"versions": [
{
"lessThanOrEqual": "nxpg100cv4-0-0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Garage Door Controller NXG-100B, NXG-200",
"vendor": "Nexx",
"versions": [
{
"lessThanOrEqual": "nxg200v-p3-4-1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The listed versions of Nexx Smart Home devices use a WebSocket server that does not validate if the bearer token in the Authorization header belongs to the device attempting to associate. This could allow any authorized user to receive alarm information and signals meant for other devices which leak a deviceId."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-20 Improper Input Validation",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-04-04T16:54:06.709Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "CVE-2023-1751",
"x_generator": {
"engine": "VINCE 2.0.7",
"env": "prod",
"origin": "https://cveawg.mitre.org/api/cve/CVE-2023-1751"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2023-1751",
"datePublished": "2023-04-04T16:54:06.709Z",
"dateReserved": "2023-03-30T20:04:29.870Z",
"dateUpdated": "2025-01-16T21:36:44.458Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-1750 (GCVE-0-2023-1750)
Vulnerability from cvelistv5 – Published: 2023-04-04 16:52 – Updated: 2025-01-16 21:36
VLAI
Title
CVE-2023-1750
Summary
The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could retrieve device history, set device settings, and retrieve device information.
Severity
7.1 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
1 reference
Impacted products
3 products
| Vendor | Product | Version | |
|---|---|---|---|
| Nexx | Smart Alarm NXAL-100 |
Affected:
0 , ≤ nxal100v-p1-9-1
(custom)
|
|
| Nexx | Smart Plug NXPG-100W |
Affected:
0 , ≤ nxpg100cv4-0-0
(custom)
|
|
| Nexx | Garage Door Controller NXG-100B, NXG-200 |
Affected:
0 , ≤ nxg200v-p3-4-1
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T05:57:25.263Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-1750",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-01-16T20:21:32.555522Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-01-16T21:36:53.482Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Smart Alarm NXAL-100",
"vendor": "Nexx",
"versions": [
{
"lessThanOrEqual": "nxal100v-p1-9-1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Smart Plug NXPG-100W",
"vendor": "Nexx",
"versions": [
{
"lessThanOrEqual": "nxpg100cv4-0-0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "Garage Door Controller NXG-100B, NXG-200",
"vendor": "Nexx",
"versions": [
{
"lessThanOrEqual": "nxg200v-p3-4-1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could retrieve device history, set device settings, and retrieve device information."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-639 Authorization Bypass Through User-Controlled Key",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-04-04T16:52:59.453Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "CVE-2023-1750",
"x_generator": {
"engine": "VINCE 2.0.7",
"env": "prod",
"origin": "https://cveawg.mitre.org/api/cve/CVE-2023-1750"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2023-1750",
"datePublished": "2023-04-04T16:52:59.453Z",
"dateReserved": "2023-03-30T20:02:38.794Z",
"dateUpdated": "2025-01-16T21:36:53.482Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}