

As per the advisory, successful exploitation of these vulnerabilities could allow an attacker to receive sensitive information or hijack devices and not a huge amount of technical ability is required to perform the attacks. Working with the US Cybersecurity and Infrastructure Security Agency (CISA), five CVEs were eventually assigned. These issues not only affected garage door openers, but also smart plug switches and alarms too.

Ars Technica reports that the $80 devices created by Nexx are suffering from a number of security issues which could compromise the safety of your home.Ī Medium post by researcher Sam Sabetan reveals the details.Īt the tail end of 2022, Sam discovered a “series of critical vulnerabilities” in the Nexx range of smart devices. A popular and reasonably cheap garage door controller is making waves in the news, and not in a good way.
