Getnexx Nxg-100b Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Getnexx Nxg-100b Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2023-1748 — CVSS 9.3 (critical): The listed versions of Nexx Smart Home devices use hard-coded credentials. An attacker with unauthenticated access to the Nexx Home mobile…
• CVE-2023-1752 — CVSS 8.1 (high): The listed versions of Nexx Smart Home devices could allow any user to register an already registered alarm or associated device with only…
• CVE-2023-1751 — CVSS 7.5 (high): The listed versions of Nexx Smart Home devices use a WebSocket server that does not validate if the bearer token in the Authorization…
• CVE-2023-1750 — CVSS 7.1 (high): The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome…
• CVE-2023-1749 — CVSS 6.5 (medium): The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome…