CVE-2023-1749 (published 2023-04-04T16:54:46.115Z)
The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could send API requests that the affected devices would execute.
Affected products: Vendor: Nexx
Product: Smart Alarm NXAL-100
Versions: 0