CVE-2023-1748

The listed versions of Nexx Smart Home devices use hard-coded credentials. An attacker with unauthenticated access to the Nexx Home mobile application or the affected firmware could view the credentials and access the MQ Telemetry Server (MQTT) server and the ability to remotely control garage doors or smart plugs for any customer.

CVSS v3 10.0 CRITICAL

10.0^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01	Third Party Advisory US Government Resource

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:getnexx:nxal-100_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:getnexx:nxal-100:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:getnexx:nxg-100b_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:getnexx:nxg-100b:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

cpe:2.3:o:getnexx:nxpg-100w_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:getnexx:nxpg-100w:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND

cpe:2.3:o:getnexx:nxg-200_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:getnexx:nxg-200:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2023-04-04 17:15

Updated : 2024-02-28 20:13

NVD link : CVE-2023-1748

Mitre link : CVE-2023-1748

CVE.ORG link : CVE-2023-1748

JSON object : View

Products Affected

getnexx

nxg-200_firmware
nxpg-100w_firmware
nxg-100b_firmware
nxg-100b
nxg-200
nxpg-100w
nxal-100
nxal-100_firmware

CWE

CWE-798

Use of Hard-coded Credentials

{"id": "CVE-2023-1748", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 10.0, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "ics-cert@hq.dhs.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.3, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 4.7, "exploitabilityScore": 3.9}]}, "published": "2023-04-04T17:15:07.060", "references": [{"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01", "tags": ["Third Party Advisory", "US Government Resource"], "source": "ics-cert@hq.dhs.gov"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-798"}]}], "descriptions": [{"lang": "en", "value": "The listed versions of Nexx Smart Home devices use hard-coded credentials. An attacker with unauthenticated access to the Nexx Home mobile application or the affected firmware could view the credentials and access the MQ Telemetry Server (MQTT) server and the ability to remotely control garage doors or smart plugs for any customer."}], "lastModified": "2023-11-07T04:04:48.833", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:getnexx:nxal-100_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ECEB2E75-CBB4-4698-8362-E299B360D230", "versionEndIncluding": "nxal100v-p1-9-1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:getnexx:nxal-100:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A105A0A9-453D-4FEC-A892-90DF700AF48F"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:getnexx:nxg-100b_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CFED44C1-D08F-485F-9613-2FF354646544", "versionEndIncluding": "nxg100bv-p3-4-1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:getnexx:nxg-100b:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "19767CB6-01EC-4D9A-B879-622D97659C41"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:getnexx:nxpg-100w_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "705949CF-FA4F-4D31-A125-897E4738FD60", "versionEndIncluding": "nxpg100cv4-0-0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:getnexx:nxpg-100w:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BABBFCE0-C690-4867-9416-5C9E453A6B1F"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:getnexx:nxg-200_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5D3856AF-F315-4D54-A415-23D870E57FDC", "versionEndIncluding": "nxg200v-p3-4-1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:getnexx:nxg-200:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E23E0481-74FD-4F0C-926C-D303DF9F9E68"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "ics-cert@hq.dhs.gov"}