Skip to main content

Naxclow Smart Devices EUVDEUVD-2026-36532

| CVE-2026-42932 MEDIUM
Generation of Predictable Numbers or Identifiers (CWE-340)
2026-06-12 icscert GHSA-x87p-mc42-f63g
Information Disclosure Smart Doorbell X3 X Smart Home V720 Ix Cam
6.9
CVSS 4.0 · Vendor: icscert
Share

Severity by source

Vendor (icscert) PRIMARY
6.9 MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
5.3 MEDIUM

Network-accessible unauthenticated endpoint; no scope change since only device IDs are disclosed; integrity and availability are unaffected.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (icscert).

CVSS VectorVendor: icscert

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

1
Analysis Generated
Jun 12, 2026 - 19:31 vuln.today

DescriptionCVE.org

Naxclow device identifiers use fixed manufacturing prefixes combined with sequential counters, producing a fully predictable and enumerable identifier space. Because the platform also exposes an endpoint that reveals the current identifier high-water mark, the active fleet can be enumerated.

AnalysisAI

Device identifier enumeration across Naxclow's IoT product line - including the Smart Doorbell X3, X Smart Home platform, V720, and IX Cam - allows unauthenticated remote attackers to build a complete inventory of active devices deployed in the field. The identifier scheme combines fixed manufacturing prefixes with sequential counters (CWE-340), and the platform compounds this by exposing an endpoint that reveals the current identifier high-water mark, effectively handing attackers a starting point for a full sweep. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Query public high-water mark API endpoint
Delivery
Extract current maximum device identifier
Exploit
Generate sequential ID list using known fixed prefix
Execution
Enumerate active Naxclow devices across fleet
Impact
Map device identifiers to physical deployments for follow-on targeting
Sign in to reveal

Vulnerability AssessmentAI

Exploitation No authentication is required (CVSS PR:N) and no special client configuration is needed (AC:L, AT:N). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 score of 6.9 with vector AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N reflects a remotely exploitable, zero-authentication, low-complexity information disclosure flaw with limited confidentiality impact (device identifiers, not credentials or PII directly). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An unauthenticated attacker sends a single HTTP request to the Naxclow platform's public identifier high-water mark endpoint to determine the current maximum device ID, then iterates sequentially through the predictable prefix+counter ID space to enumerate every active device in the fleet. The resulting device inventory reveals which physical locations have deployed Naxclow cameras and doorbells, enabling targeted follow-on attacks such as physical intrusion timing or device-specific exploitation. …
Remediation No vendor-released patch version has been identified at time of analysis; the CPE entries carry wildcard version ranges and no fixed-version advisory was referenced. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Smart Doorbell X3

View all
CVE-2026-50101 CRITICAL
9.2 Jun 12

Persistent credential exposure in Naxclow smart cameras and doorbells (Smart Doorbell X3, X Smart Home, V720, ix Cam) al
CVE-2026-28742 CRITICAL
9.2 Jun 12

Cryptographic authentication bypass in Naxclow smart home devices (Smart Doorbell X3, X Smart Home, V720, Ix Cam) allows
CVE-2026-42947 HIGH
8.7 Jun 12

Device takeover in Naxclow's IoT platform (Smart Doorbell X3, X Smart Home, V720, and iX Cam) allows any authenticated a
CVE-2026-50108 HIGH
8.7 Jun 12

Unauthorized credential disclosure in the Naxclow IoT platform API (affecting Smart Doorbell X3, X Smart Home, V720, and
CVE-2026-50244 MEDIUM
6.9 Jun 12

Fleet enumeration in the Naxclow smart home platform (Smart Doorbell X3, X Smart Home, V720, Ix Cam) allows unauthentica
CVE-2026-50099 MEDIUM
5.1 Jun 12

WiFi credential exposure in Naxclow IoT device firmware (Smart Doorbell X3, X Smart Home, V720, Ix Cam) allows any attac

Same weakness CWE-340 – Generation of Predictable Numbers or Identifiers

View all
CVE-2025-15604 CRITICAL
9.8
CVE-2026-3256 CRITICAL
9.8
CVE-2026-11374 CRITICAL
9.0
CVE-2026-9733 CRITICAL
9.1
CVE-2026-5081 CRITICAL
9.1
CVE-2026-5085 CRITICAL
9.1
CVE-2026-9219 HIGH
8.3
CVE-2025-40923 CRITICAL
7.3

Same technique Information Disclosure

View all
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2014-6324 HIGH POC
8.8
CVE-2017-0213 HIGH POC
7.3
CVE-2016-7255 HIGH POC
7.8
CVE-2010-0232 HIGH POC
7.8
CVE-2025-30066 HIGH POC
8.6
CVE-2025-54236 CRITICAL POC
9.1

Share

EUVD-2026-36532 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy