April 4, 2023, 5:15 p.m. |

National Vulnerability Database web.nvd.nist.gov

The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could retrieve device history, set device settings, and retrieve device information.

access access control actions control cve device devices history home information nexx settings smart smart home smart home devices valid

Sr. Product Manager

@ MixMode | Remote, US

Information Security Engineers

@ D. E. Shaw Research | New York City

Technology Security Analyst

@ Halton Region | Oakville, Ontario, Canada

Senior Cyber Security Analyst

@ Valley Water | San Jose, CA

Cybersecurity CASB Engineer - Corporate (Las Vegas)

@ Caesars Entertainment | United States

Cyber Security Engineer II (Boundary Protection,WAF, ZTNA,AWS)

@ FICO | Bengaluru, India