CVE-2023-1751
Published: 04 April 2023
Summary
CVE-2023-1751 is a high-severity an unspecified weakness vulnerability in Getnexx Nxal-100 Firmware. Its CVSS base score is 7.5 (High).
Operationally, ranked in the top 49.0% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-23972
Vulnerability details
The listed versions of Nexx Smart Home devices use a WebSocket server that does not validate if the bearer token in the Authorization header belongs to the device attempting to associate. This could allow any authorized user to receive alarm…
more
information and signals meant for other devices which leak a deviceId.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.