Nexx Smart Garage Doors Vulnerable to Remote Hacking

Multiple vulnerabilities have been discovered in Nexx smart devices that can be exploited to control garage doors, disable home alarms, or smart plugs. The most significant discovery is the use of universal credentials that are hardcoded in the firmware and also easy to obtain from the client communication with Nexx's API. The vendor has yet to acknowledge and fix the five security issues disclosed publicly, with severity scores ranging from medium to critical. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published a relevant alert, warning owners of Nexx products that attackers could access sensitive information, execute API requests, or hijack their devices.