Smart Plug NXPG-100W vulnerabilities

2 known vulnerabilities in Smart Plug NXPG-100W from Nexx. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Smart Alarm NXAL-100: Authorization Bypass Through User-Controlled Key

  CVE-2023-1750Apr 4, 2023Nexx

  The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could retrieve device history, set device settings, and retrieve device information.

• 10.0 Critical severity

  Smart Alarm NXAL-100: Use of Hard-coded Credentials

  CVE-2023-1748Apr 4, 2023Nexx

  The listed versions of Nexx Smart Home devices use hard-coded credentials. An attacker with unauthenticated access to the Nexx Home mobile application or the affected firmware could view the credentials and access the MQ Telemetry Server (MQTT) server and the