April 4, 2023, 5:15 p.m. |

National Vulnerability Database web.nvd.nist.gov

The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could send API requests that the affected devices would execute.

access access control actions api control cve devices home nexx requests send smart smart home smart home devices valid

Information Security Engineers

@ D. E. Shaw Research | New York City

Technology Security Analyst

@ Halton Region | Oakville, Ontario, Canada

Senior Cyber Security Analyst

@ Valley Water | San Jose, CA

Sr. Security Engineer

@ BedRock Systems | San Francisco, Boston, DC, Berlin, Munich, Bengaluru

Project Manager - Project Principal Consultant

@ SAP | Istanbul, TR, 34700

Software Security Engineer

@ Ledger | Paris, France