CVE-2023-1750

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could retrieve device history, set device settings, and retrieve device information.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Weakness enumeration

CWE-639

Affected software

No affected versions have been published.

Timeline

Published
Apr 4, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-17515.3The listed versions of Nexx Smart Home devices use a WebSocket server that does not validate if the bearer token in the Authorization headerCVE-2023-17524.3The listed versions of Nexx Smart Home devices could allow any user to register an already registered alarm or associated device with only tCVE-2023-17539.8Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.12.CVE-2023-17544.7Improper Neutralization of Input During Web Page Generation in GitHub repository thorsten/phpmyfaq prior to 3.1.12.CVE-2023-17555.4Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.12.CVE-2023-17565.4Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.CVE-2023-17575.4Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.CVE-2023-17585.4Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository thorsten/phpmyfaq prior to 3.1.CVE-2023-17594.8Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.CVE-2023-17604.8Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.CVE-2023-17615.4Cross-site Scripting in GitHub repository thorsten/phpmyfaq prior to 3.1.12.CVE-2023-17628.8Improper Privilege Management in GitHub repository thorsten/phpmyfaq prior to 3.1.12.
CVE-2023-1750: High severity, CVSS 7.1 | Vulnix