CVE:CVE-2023-1751
CNNVD:CNNVD-202304-172
Nexx Smart Plug等都是Nexx公司的产品。Nexx Smart Plug是一款智能插头。Nexx Smart Alarm是一款智能报警器。Nexx Smart Home Device是一款智能家居设备。
Nexx Smart Home Device存在安全漏洞，该漏洞源于不验证授权标头中的持有者令牌是否属于尝试关联的设备，这可能允许任何授权用户接收警报信息和信号。
solution:Upgrade getnexx nxal-100_firmware to a higher version than nxal100v-p1-9-1,and avoid the version (,nxal100v-p1-9-1]; Upgrade getnexx nxg-100b_firmware to a higher version than nxg100bv-p3-4-1,and avoid the version (,nxg100bv-p3-4-1]; Upgrade getnexx nxpg-100w_firmware to a higher version than nxpg100cv4-0-0,and avoid the version (,nxpg100cv4-0-0]; Upgrade getnexx nxg-200_firmware to a higher version than nxg200v-p3-4-1,and avoid the version (,nxg200v-p3-4-1]