Successful exploitation of these vulnerabilities could allow an attacker to impersonate devices, intercept or manipulate communications, harvest sensitive credentials at scale, or gain unauthorized access.
The following versions of Naxclow IoT Platform are affected:
Smart Doorbell X3 vers:all/*
X Smart Home vers:all/*
V720 vers:all/*
ix cam vers:all/*
Vendor
Equipment
Naxclow
Naxclow IoT Platform
Authorization Bypass Through User-Controlled Key, Missing Authorization, Not Using Password Aging, Use of Hard-coded Cryptographic Key, Generation of Predictable Numbers or Identifiers, Insertion of Sensitive Information into Externally-Accessible File or Directory