Product Library / Garage & Access

Research profile · last verified 2026-08-13

Nexx Smart Wi-Fi Garage Door Controller (NXG-300)

Compiled by SmartHomeWorkflow Research · Nexx · Garage & Access · ~$79.99 ($79.99 on the maker's own store, re-read 2026-08-13: available, and the store shows no struck-through original, so this is the list price and not a promotion. Unchanged since 2026-07-19. The two predecessor models named in the federal advisory, NXG-100B and NXG-200, are still sold out. The stored figure was a rounded $80 until 2026-08-13.)

⚠ Similar names, different products: Nexx and Nexxt are two unrelated companies, and the near-collision reaches every place a buyer would go to check this product. This device is made by SimpalTek, LLC under the Nexx name. Nexxt Solutions is a separate networking brand. In the US App Store the Nexx Home app (SimpalTek) sits beside 'Nexxt Home' (Software Brokers of America) and 'Nexx Smart Home' (Ojasvit Techno Private Limited), neither of which controls this product. It matters most in the security record: an NVD keyword search for 'Nexx' returns eighteen CVEs, and the ten most recent — the 2025 and 2026 entries — are Nexxt Solutions router vulnerabilities, not this vendor's. Anyone checking whether Nexx has new vulnerabilities will find some, and they will belong to somebody else.

Exactly which product this is[7][17]

Model number
NXG-300
Generation
3rd (follows NXG-100B and NXG-200)
Region this page covers
US
Also sold or listed as
Nexx Garage NXG-300 · Nexx Smart Garage Door Opener

“Not established” means we have not sourced that detail yet — not that the product has no model number, generation or regional variant. We publish the gap rather than filling it.

Compatibility

EcosystemSupportThe catch
Apple HomeDoesn't workVerified: does not work with this ecosystem[21]Not an Apple Home accessory — it never appears in the Home app, and there is no HomeKit hub access, automation or sharing. The vendor's own NXG-300 page lists 'Siri' under Works With and makes no HomeKit claim, and its documentation describes Siri SHORTCUTS setup, which runs an app action by voice. So this is not a false vendor claim. But the retail listing title reads 'Compatible with Alexa, Google Assistant, Siri', which is accurate and easily misread by a buyer as Apple Home support.
Amazon AlexaPartialPartial support — see the catch[20]Works through an Alexa smart-home skill, published under the maker's company name SimpalTEK, over the maker's cloud. The maker's own page carries a real limit: 'Routines are not available due to Amazon Restrictions', so the device cannot take part in Alexa Routines. Two skill generations exist with different phrasing: the older one needs 'Alexa, ask Nexx Garage to open garage door', the newer smart-home skill does not. We could not read the Amazon skill store pages, so the skill's rating, review count and last update are unknown.
Google HomePartialPartial support — see the catch[28]Works through a cloud-to-cloud Google Home Action. Opening by voice requires a spoken PIN and it cannot be disabled; closing requires none. That is Google's safety behaviour for garage doors rather than a vendor limitation. Google's own works-with directory listing could not be retrieved, so the directory status is UNKNOWN and this rests on hands-on reporting plus the vendor's own materials.
SmartThingsPartialPartial support — see the catch[28]A cloud-to-cloud SmartThings connection exists under the brand NexxHome, and the maker states outright that it does not work with a SmartThings hub; there is no local path, only cloud to cloud. One forward-looking catch that also affects the Home Assistant workaround: per Home Assistant's own documentation, Samsung begins phasing out free third-party access to SmartThings in October 2026 in favour of a paid plan, so a route that is free today may not stay free.
Home AssistantDoesn't workVerified: does not work with this ecosystem[28]No official integration and no community add-on exist. Home Assistant community requests date back to 2018 and remain unfulfilled. The maker's own answer is a support article routing Home Assistant users through SmartThings, a two-cloud chain from Home Assistant to Samsung's cloud to Nexx's cloud, and the maker disclaims even that: 'shared by one of our Nexx users and hasn't been fully tested by our team. Please use at your own risk.' The only genuinely local path is destructive: owners of the NXG-200 have replaced its firmware entirely, which voids the warranty and abandons the Nexx app. Recorded as no because a maker-disclaimed two-cloud chain and a firmware replacement are not integrations.

Protocols: WIFI · BLUETOOTH[8][12]

Needs before it works: No hub; the controller joins your 2.4 GHz Wi-Fi directly. Bluetooth is advertised on the product page as 'New Bluetooth connectivity', and the maker's blog claims the predecessor works over Bluetooth so you can control the door when the internet is out. Treat that claim as thinly documented: the quick-start guide filed with the FCC does not mention Bluetooth at all, and the maker publishes nothing about its range, whether it works only with a phone nearby, or whether it reports status as well as opening the door. All of that is unknown. Every ecosystem connection runs through the maker's cloud; no way to control it on your own network is documented.[12]

What it can do[24]

You can tell it to

  • Open/close

It reports

  • Contact state

Whether each platform's automations and routines can use it — not just whether its app shows it.

What it doesGoogle HomeAlexaSmartThings
Open/close✓ routines can use it✓ routines can use it✓ routines can use it
Contact state✓ routines can use it✓ routines can use it✓ routines can use it

Platform documentation: Amazon Alexa — automation engine ceiling (eight terms observed; residue inconclusive by refusal) (2026-09-01), Google Home — automation engine ceiling (2026-09-01), SmartThings — automation engine ceiling (2026-09-01)

Listed capabilities are what we could establish from vendor documentation. An ability missing here is unestablished — not necessarily absent.

Subscription reality[20]

✓ Works without a subscription: Yes.

Vendor account required: Not established — we have not sourced this yet.

No subscription was found for any function. Noted for completeness rather than as a selling point — the material facts about this product are in the security and safety sections below, not in its pricing model.

Maintenance reality[16]

Security updates[25]

Nexx publishes no security-update support date for this model. That is a gap in what the manufacturer has published, not evidence either way — some makers declare a support period and some say nothing at all.

Nexx publishes no security-support period, and on this model it publishes noticeably less than that. The product page carries no firmware, update or security statement of any kind. The support index is the more telling surface: it lists five products - Smart Alarm NXAL-100, Smart Garage NXG-200, Smart Garage NXG-100, Smart Plug NXPG-100 and Smart Garage Adapter NXAD-200 - and the NXG-300 this record describes is not among them, so the vendor's own support hub offers it no manuals, troubleshooting or compatibility pages. No regulatory declaration was found on any Nexx surface. Readers should weigh that against what this record already documents about the 2023 federal advisory affecting Nexx controllers: a manufacturer with an open advisory history that publishes no patching commitment leaves a buyer with nothing to hold it to.

The catch

There is an open United States government security advisory covering this product line, and the maker never engaged with it. CISA published the advisory on 4 April 2023, covering five vulnerabilities in Nexx devices. The most severe, rated 9.3 by CISA and 10 out of 10 by the national vulnerability database, was a set of universal built-in credentials that let a remote attacker open any customer's garage door with one request. The researcher first contacted Nexx on 4 January 2023 and received no reply before publishing three months later. Nexx did act afterwards: on 7 April 2023 it emailed customers announcing a security update by April 10 and said it had disabled the devices' internet connection to address the issue. What nobody has ever established is whether that fixed anything. CISA's advisory has never been revised and still reads 'Nexx has not responded to requests to work with CISA to mitigate these vulnerabilities.' All five vulnerabilities remain listed with no patch, no maker advisory and no fixed version. Nexx has published no security bulletin and no firmware changelog, and no researcher, journalist or agency has re-tested in the three years since. Two more facts a buyer should have: the built-in credentials were reported to live in both the firmware and the phone app, and the iPhone app has not been updated since December 2021, so no app update has ever removed them, though the server-side flaws could have been fixed silently. And the two other products named in that advisory, the Smart Plug and the Smart Alarm, are still listed for sale today; the two garage models CISA named are the two now sold out. None of this appears on the maker's site, which markets the product's encryption in superlative terms. Separately, and on a different axis: federal rules require an audible and visual warning before any unattended close, and Nexx publishes an official tutorial for switching its warning beep off, a mandatory safety function shipped as a user preference. No visual warning component is evidenced at all. The safety documentation has also gone backwards over the product line's life: the older NXG-100 manual carries a proper installation-warning page, and the NXG-200 and NXG-300 manuals dropped it, leaving a single generic line.

Who it's for

Anyone considering this needs to weigh one thing that no specification sheet carries: a federal advisory covering this product line remains open, the vendor is recorded in it as not having responded, no fix has ever been publicly confirmed by any independent party, and the vendor is still selling other products named in that same advisory. A buyer who is comfortable proceeding would need to be satisfied without any way to verify whether the unit they receive is remediated, because the vendor has published nothing that would let them check. On the functional side, setting the security question aside entirely: it is a cloud-dependent controller with no Apple Home support, no Home Assistant path, no Matter, an Alexa integration that cannot participate in Routines, and an iOS app frozen since 2021 at a 1.76-star rating. Households on Alexa or Google who want a straightforward cloud controller have several alternatives in this category at similar or lower prices without an open advisory attached. We are recording this product because the advisory is a documented public fact that a buyer will not find on the vendor's own pages, not because we have tested it.

Sources & method

Numbered sources below back the facts marked with the matching number above. This is a research profile: compiled from manufacturer documentation, certification registries, and published testing — we state facts, not verdicts, and we have not physically tested this unit. How we work →

32 numbered sources· read them in the source's own words
  1. [1] Read in full from cisa.gov (our browser-based reader was turned away; a direct read succeeded), released 2023-04-04, covering NXG-100B and NXG-200 plus the Smart Plug and Smart Alarm. Five CVEs: CVE-2023-1748 (hard-coded credentials), CVE-2023-1749, CVE-2023-1750, CVE-2023-1751, CVE-2023-1752. CVE-2023-1748 is scored 9.3 by CISA and 10.0 at NVD — the two authorities differ and both figures are recorded rather than picking one. — Read a public regulatory filing, verified 2026-07-19
  2. [2] Researcher Sam Sabetan's own writeup establishes first contact 2023-01-04 and public release 2023-04-04 with no reply at any point. CISA's advisory independently records that Nexx did not respond to coordination attempts. Both are primary to their respective authors., verified 2026-07-19
  3. [3] On 2023-04-07 Nexx emailed customers announcing 'a system update to the following product devices to enhance their security and performance: Nexx Garage (all models), Nexx Gate (all models), and Nexx Plug', rolling out that day and completing by 2023-04-10 'if not earlier', and stating 'We had to disable the device internet connection to address this issue'. VERIFICATION CHECKS, ALL NEGATIVE as of 2026-07-19: CISA's advisory shows only the 2023-04-04 release date with no Update A/B revision markers and its mitigations section still reads 'Nexx has not responded to requests to work with CISA to mitigate these vulnerabilities'; all five CVEs at NVD remain vulnStatus Modified, last modified 2026-06-17; reference tags on all five are only Third Party Advisory and US Government Resource, with no Patch and no Vendor Advisory tag; no CPE range on any of the five carries a versionEndExcluding, so NVD records no version at which the flaw ceases. No Nexx security bulletin or firmware changelog was found, and no independent re-test by any researcher, journalist or agency was found in three years. RECORDED DELIBERATELY as 'no confirmed fix' rather than 'unpatched', because asserting a remediated product was unpatched would be a serious error in the other direction. Note in fairness that CVE-2023-1749 through -1752 are server-side and could have been remediated silently. — Read a public regulatory filing, verified 2026-07-19
  4. [4] Domain getnexx.com active, created 2019-02-21, updated 2026-01-17, expires 2027-02-21, status ok. Storefront live and functional with an active cart. ANDROID app Nexx Home v3.11.1.14 updated 2026-01-26. iOS app Nexx Home v3.8.2.3 last updated 2021-12-03, rating 1.76 from 205 ratings. Legal entity SimpalTEK LLC confirmed via both app stores, FCC grantee code 2AN5L, and three registered trademarks. THIS CORRECTS THE BRIEF'S PREMISE: 'vendor abandonment' is too blunt — a company shipping Android builds in 2026 is not defunct. The accurate characterisation is selective neglect plus non-engagement: an active seller that maintains one platform, left the other frozen since before the vulnerabilities were reported, and never answered a researcher, a federal agency or the press. UNKNOWN: Texas entity standing (Comptroller lookup is a session-gated POST returning 302) and current support responsiveness (JS-rendered review widget) — both recorded as observed live, viability unverified. — Checked a certification register, verified 2026-07-19
  5. [5] All THREE FCC-filed manuals were read directly — NXG-100 (2AN5LNXG-100R), NXG-200 (2AN5LNXG200) and NXG-300 (2AZD7NXG-300). A keyword sweep across all three for 'UL 325', '1211', 'audible', 'alarm', 'unattended', 'remote clos' and 'flash' returned zero substantive hits: no §1211.14(f) marking, no reference to 16 CFR 1211, and no documented audible-and-visual pre-close warning sequence. THE SHARPER FINDING, which is stronger than an absence: Nexx publishes an official tutorial titled 'Nexx Home App: Enable or Disable Garage Opener Beep Warning Sound' (March 2021), and its support material states the app 'allows you to choose if your garage door should play a warning sound when activated or not'. 16 CFR 1211 §1211.14 makes the warning MANDATORY, not a user preference — a warning shipped as a toggle the owner can switch off does not meet a mandatory requirement regardless of its default state. Warning hardware does exist (the manual documents pairing beeps: 2 entering pairing, 3 on success, one 2-second beep on failure), but NO visual warning component is evidenced anywhere — the only lights are Power, WiFi and Activity status LEDs on the unit body, inside the garage, which is not a warning lamp. A DOCUMENTATION REGRESSION worth recording: the OLDEST model has the MOST safety documentation. The NXG-100 manual carries a proper installation-warning page ('Nexx Garage and any door sensors are meant to be used with garage door openers that are equipped with photoelectric safety sensors (manufactured after 1993)' plus 'NEVER operate the remote access feature of your Nexx Garage without ensuring that it is safe to do so'), and the newer NXG-200 and NXG-300 manuals DROPPED that page entirely, leaving one line: 'SAFETY WARNING: Make sure the garage door does not get obstructed by any child, person, or object.' STATED WITHOUT OVERREACH: no teardown or firmware analysis was performed, so the beep's duration, its timing relative to door movement, and its default state are all UNKNOWN, and retail packaging was not photographed. This is a documented gap plus a documented defeatable control, NOT a finding of regulatory non-compliance. — Read a public regulatory filing, verified 2026-07-19
  6. [6] Two independent signals. FIRST, the FCC grantee changed: every earlier Nexx model was filed by SimpalTEK LLC itself (grantee code 2AN5L), while the NXG-300 was filed under 2AZD7 — CherryEmme Technologies Co. Ltd of Hong Kong, granted 2021-03-29 — which is the signature of moving from in-house design to a contract manufacturer. SECOND, and unambiguous: the NXG-300's own user manual repeatedly refers to the NXG-200, with step headings reading '6. CHECK STATUS OF NXG-200' and '7. ADD NXG-200 TO NEXX HOME'. It is the NXG-200 document with the title swapped and the body left uncorrected. The same manual contains mangled customer-facing links ('gotnexx.Bm/dwck', 'support@getnexx.Bm') that would not work if typed. PRACTICAL CONSEQUENCE FOR THE SECURITY QUESTION: the NXG-300 is the only garage model still purchasable and the only one NOT named in CISA's advisory — but if it is the NXG-200 design re-sourced to an ODM, its absence from the advisory is a technicality of enumeration rather than evidence it was ever fixed. All grant dates were verified against two independent sources (fccid.io and fcc.report) because fccid.io initially showed application and grant dates as identical. — Read a public regulatory filing, verified 2026-07-19
  7. [7] The Texas Comptroller's public Active Franchise Taxpayers dataset (data.texas.gov/resource/9cir-efmm.json, rows updated 2026-07-18) lists SIMPALTEK LLC with status A (Active) and right to transact business A (Active), taxpayer number 32060503383, charter date 2016-05-16, at an address matching the FCC grantee record exactly. Nexx's cloud is up (api.nexxhome.com and home.nexxhome.com both answer normally) and the store takes orders. NO acquisition, bankruptcy, insolvency or discontinuation reporting was found. RECORDED EXPLICITLY BECAUSE 'DEFUNCT' WOULD BE FACTUALLY WRONG and indefensible. What the evidence supports instead is a single-maintainer skeleton operation: the Android app shipped 2026-01-26 while the iOS app has been untouched since 2021-12-03 at 1.8 stars; the YouTube channel linked in Nexx's own site footer is CONFIRMED DEAD ('This channel does not exist'); the Facebook page appears deleted, which is meaningful rather than a login wall because Facebook group content loaded un-authenticated in the same session; there is no phone support, only email; no BBB profile exists across three searches; and the parent's own domain simpaltek.com is a dead Shopify store. Also confirmed: the two garage models named in CISA's advisory (NXG-200, NXG-100B) are now listed as out of stock, while the Smart Plug NXPG-100 and Smart Alarm NXAL-100 — also named in that advisory — remain purchasable., verified 2026-07-19
    Backs: Product identity
  8. [8] csa-iot.org/csa-iot_products/ was searched for 'nexx' twice, once with Matter and product-type filters and once unfiltered. Both loaded successfully and returned 'No Entries Found — Please try adjusting your selected filters.' A blocked search does not produce that message. Nexx makes no Matter or Thread claim on its own product page either. — Checked a certification register, verified 2026-07-19
    Backs: Protocols
  9. [9] From the FCC-filed NXG-300 quick-start guide: the compatibility test instructs the installer to 'put each end to the same terminals where your wall button wires are terminated to. By doing so, your garage door should activate', and installation is to 'twist together each wire of the wall button to each of Nexx's connection' with 'It does not matter which wires goes to which terminals'. So it is a momentary dry-contact relay wired in parallel with the existing wall button, polarity-agnostic. WHAT IS NOT ESTABLISHED: Nexx publishes NO statement anywhere naming Security+ 2.0, Security+ 3.0, learn-button colours or myQ, and its compatibility page is a dropdown lookup with no published static list. A Nexx adapter (NXAD-200) exists and the vendor states some openers 'will only work with Nexx Garage Adapter', which fits the pattern of digital-serial wall controls defeating a plain contact closure — but that reasoning is mechanism-level inference plus third-party adapter evidence, NOT a Nexx claim, and is flagged as such., verified 2026-07-19
  10. [10] Three searches of the US Consumer Product Safety Commission's recall database at saferproducts.gov — by recall title, by product name and by recall description, each on Nexx — came back empty, while a control search on 'garage' as the product name found 8 recalls (Chamberlain myQ 2023, Loctek, Eagle, H.E., Genie, Lennox, Chamberlain 1997, Stanley 1991), none of them Nexx. So the negative is real. A WARNING ABOUT THIS DATABASE THAT SHOULD TRAVEL TO FUTURE RECORDS: searching it by manufacturer name narrows nothing — the identical 9,905 records came back for 'Nexx', for 'SimpalTEK', and for the nonsense control string 'ZZZZQQQQNOTREAL'. Any result obtained that way is meaningless and must not be cited. Note also that the absence of a recall is NOT evidence of safety: a recall requires CPSC action, and consumer incident reports could not be checked, because the CPSC's public incident database offers no way for software to query it. — Read a public regulatory filing, verified 2026-07-19
  11. [11] smarthomeexplorer.com/guides/best-smart-garage-door-openers-2026 claims a CNET rating of 8.2/10 for the NXG-300 and quotes CNET as saying it 'responds to voice commands faster than any other single-controller garage opener in this price range'. NO CNET review of this product could be found at all; the quote and the score appear invented. The same page presents a '7.8/10 Consensus' aggregated from '21 trusted sources including Wirecutter, CNET, PCMag, Consumer Reports', none of which could be verified as having reviewed it, and recommends the product in a 2026 buying guide with NO mention of the CISA advisory or the five CVEs — the single most decision-relevant fact about it. Also rejected: manuals.plus serves an NXG-300 'manual' page contaminated with a different product's content, listing All-O-Matic support contacts and describing RADIO/COMMON terminal wiring — the FCC filing was used instead. CLOSED TO AUTOMATED READERS and unreachable: cisa.gov through our browser-based reader (turned away, then read directly instead), Amazon's Alexa skill store pages (their server failed on every attempt), and Google's works-with directory listing., verified 2026-07-19
  12. [12] getnexx.com/products/nexx-smart-wi-fi-garage-door-controller-nxg-300, read 2026-08-09: the page advertises 'New Bluetooth Connectivity' and 'Greater control and convenience with NEW Bluetooth activation', and its connectivity specification names only '802.11 b/g/n Wi-Fi connection @ 2.4GHz' — no Bluetooth role, range or capability is stated. getnexx.com/pages/faq, read the same day, contains no Bluetooth answer. Nexx's internet-outage Bluetooth claim was located but is published for the NXG-200 and is not cited here. — Read on the maker's own site, verified 2026-08-09
    Backs: Protocols, Required hub or bridge
  13. [13] The NXG-300 is listed at $79.99 with an active cart on getnexx.com, checked 2026-07-19. The predecessors NXG-100B and NXG-200 are sold out. The original release year of the NXG-300 could not be primary-sourced and is recorded as unknown. NOTE ONE FACT CARRIED FROM THE SECURITY RECORD BELOW: two other products explicitly named in CISA advisory ICSA-23-094-01 — the Smart Plug NXPG-100W and the Smart Alarm NXAL-100 — also remain listed for sale., verified 2026-07-19
    Backs: Market availability
  14. [14] The company is operating: the domain was updated 2026-01-17, the storefront is live and taking orders, and the Android app shipped version 3.11.1.14 on 2026-01-26. But platform maintenance is markedly uneven and one half of the product has not been touched in years., verified 2026-07-19
    Backs: Service status
  15. [15] Nexx's own store listing for this controller at getnexx.com/products/nexx-smart-wi-fi-garage-door-controller-nxg-300, read as structured product data on 2026-08-13: $79.99, no struck-through price beside it, in stock, one version only. The whole catalogue was read the same day, which also settles the two facts this record's catch depends on: the two garage models CISA named are still out of stock (NXG-200 $79.99, NXG-100B $59.99 and the recertified NXG-100B $49.99), while the Smart Plug NXPG-100W ($16.99/$29.99/$49.99) and NEXX SMART ALARM ($149.99) named in the SAME advisory are still buyable. — Read on the maker's own site, verified 2026-08-13
    Backs: Price, Market availability
  16. [16] Apple's own App Store search for 'Nexx Home', read 2026-08-13, returns Nexx Home by SimpalTek, LLC: version 3.8.2.3, last updated 2021-12-03, first released 2018-10-11, an average rating of 1.76 from 205 ratings, and iOS 12.2 or later required. Every one of those figures is identical to the 2026-07-19 record, which is the finding: nothing has moved in four years and eight months, across a federal advisory and two subsequent product generations. ⊕ Read from Apple's own structured search results rather than the App Store web page, so the version and the date come from Apple's data directly rather than from page text. — Read what the other company publishes, verified 2026-08-13
    Backs: Service status, Maintenance
    Checked 2026-08-13. This page no longer lets us re-check it automatically, so that date is where this fact stands.
  17. [17] services.nvd.nist.gov keywordSearch=Nexx read 2026-08-13 returns 18 CVEs. CVE-2026-31848 was opened to check: its description and CPE name 'Nexxt Solutions' and the product 'Nebula 300+', a router — not this vendor. The same holds for the CVE-2025-52376..79 and CVE-2026-31846..51 clusters. Apple's App Store search on the same day returns 'Nexxt Home' (Software Brokers of America) and 'Nexx Smart Home' (Ojasvit Techno Private Limited) beside the real Nexx Home app. ⚠ RECORDED BECAUSE A KEYWORD SEARCH IS HOW A CAREFUL BUYER WOULD CHECK THIS PRODUCT, and here it returns a majority of results about somebody else — which cuts BOTH ways: it manufactures alarm about Nexx, and it would equally hide a real Nexx finding in a list of Nexxt ones. — Checked a certification register, verified 2026-08-13
    Backs: Product identity
  18. [18] services.nvd.nist.gov read 2026-08-13. CVE-2023-1748 carries vulnStatus 'Modified', NVD primary CVSS 10.0 and ICS-CERT secondary 9.3, lastModified 2026-06-17. Its reference set is TWO entries, both the same CISA advisory URL, tagged verbatim ["Third Party Advisory","US Government Resource"]. CVE-2023-1750 was read the same way as a second sample and its tags are byte-identical. ⚠ METHOD: a summary table over the whole keyword search reported a 'Vendor Advisory' tag on these CVEs; reading the per-CVE reference objects showed the tags are Third Party Advisory / US Government Resource and nothing else. The summary was wrong, and it was wrong in the direction that would have let us quietly retire this record's central claim. Tag arrays get read verbatim or not at all. — Checked a certification register, verified 2026-08-13
  19. [19] cisa.gov refused both permitted routes on 2026-08-13: the advisory page www.cisa.gov/news-events/ics-advisories/icsa-23-094-01 turned us away, and so did the machine-readable copy of the same advisory at www.cisa.gov/sites/default/files/csaf/2023/icsa-23-094-01.json. A refusal like that is a policy statement, so no browser read was attempted — reading a page in a browser is for pages that will not display otherwise, never for a site that has said no. ⚠ WHAT THIS MEANS FOR THE RECORD, stated plainly: this record's sentence that the advisory 'has never been revised and still reads Nexx has not responded' rests on the 2026-07-19 read and was NOT re-checked that day. What the day's evidence does support is narrower and worth keeping separate — NVD's copy of all five CVEs still carries no patch and no vendor-advisory reference, which is corroboration of the same picture from a different registry, not a re-read of the sentence., verified 2026-08-13
  20. [20] getnexx.com product page read 2026-08-13. Subscription: no plan, fee, tier or recurring-cost language appears anywhere on the page — the $79.99 is a one-time purchase, which closes the subscription axis on an affirmative read rather than on an absence assumed from elsewhere. Alexa: the page still carries 'Routines are not available due to Amazon Restrictions.' verbatim, so that integration catch is current rather than inherited. Apple: the Works With list reads 'iOS, Android, Bluetooth, Amazon Alexa, Google Home, Siri, SmartThings, IFTTT' — Siri is named, HomeKit and Apple Home appear nowhere on the page, which is exactly the shape the apple cell records (none, via Siri Shortcuts, with a retail title a buyer can misread). Bluetooth is still marketed as 'New Bluetooth Connectivity' with no specification behind it. — Read on the maker's own site, verified 2026-08-13
    Backs: Subscription, Amazon Alexa compatibility
  21. [21] getnexx.com product page for the NXG-300, read 2026-08-13. The Works With list reads verbatim: 'iOS, Android, Bluetooth, Amazon Alexa, Google Home, Siri, SmartThings, IFTTT'. Neither 'HomeKit' nor 'Apple Home' appears anywhere on the page. Nexx's own documentation describes Siri SHORTCUTS setup, which runs an app action by voice rather than exposing an accessory to the Home app. — Read on the maker's own site, verified 2026-08-13
    Backs: Apple Home compatibility
  22. [22] Re-verification performed 2026-08-13: price, stock, and the stock status of the models the advisory names, from the store's own structured product data · the frozen iOS app from Apple's own App Store search results · all five advisory CVEs re-read at NVD with their reference tags quoted exactly · the maker's product page re-read for subscription, Alexa Routines and the Works-With list. No integration level changed. Two things ESTABLISHED that day, which this record should carry forward: cisa.gov refuses us on both permitted routes, so the sentence about the advisory's text rests on the July read and now says so; and a keyword search of NVD for this brand is mostly false matches belonging to Nexxt Solutions, which this record now notes as a confusable name. The stored price was corrected from a rounded $80 to $79.99. — Re-checked this against its sources, verified 2026-08-13
    Backs: Research status
  23. [23] getnexx.com product page (connectivity specification) and the calibrated CSA-IoT search, both already cited on this record — Recorded from our own earlier read, verified 2026-08-19
    Backs: What it provides to your home
  24. [24] getnexx.com product page for the NXG-300, read 2026-08-20: owners can "open, close, and monitor their garage door from anywhere in the world", with notifications when the door status changes and reminders if it is left open. Automation surfaces include "Just Drive" geofenced opening and schedules to "automatically arm and disarm at a certain date and time". Ecosystems named: iOS, Android, Bluetooth, Amazon Alexa, Google Home, Siri, SmartThings and IFTTT, with Alexa/Google/Siri each able to "Open, close, or monitor" — and the qualifier "Routines are not available due to Amazon Restrictions". — Read on the maker's own site, verified 2026-08-20
    Backs: Capabilities
  25. [25] Nexx first-party surfaces read 2026-08-22. Product page getnexx.com/products/nexx-smart-wi-fi-garage-door-controller-nxg-300 contains no occurrence of firmware, security, update or support in any support-period sense. Support index getnexx.com/pages/support enumerates its supported products by model - "Nexx Smart Alarm NXAL-100", "Nexx Smart Garage NXG-200", "Nexx Smart Garage NXG-100", "Nexx Smart Plug NXPG-100", "Nexx Smart Garage Adapter NXAD-200" - and does not list the NXG-300. getnexx.com/pages/security does not exist. No UK PSTI statement or equivalent declaration for Nexx or Simpaltek was located. — Read the original source directly, verified 2026-08-22
    Backs: Security-update support period
  26. [26] No source was read for this entry, deliberately. It records a classification so the classification is not silent: what was classified is evidence this record already carried — the integration catches and the citations already listed on this page — and none of it was altered., verified 2026-08-22
  27. [27] Record-keeping entry: the migrated research stamp was retired from this record on 2026-08-30, verified 2026-08-30
  28. [28] Nexx, NXG-300 Smart Wi-Fi Garage Door Controller product page (https://getnexx.com/products/nexx-smart-wi-fi-garage-door-controller-nxg-300), read 2026-09-03, and the page was live. The page publishes a "Works With" list, verbatim and in order: "iOS · Android · Bluetooth · Amazon Alexa · Google Home · Siri · SmartThings · IFTTT" — which names Google Home and SmartThings, and does NOT name Home Assistant. The feature copy states the voice scope, verbatim: "VOICE CONTROL Open, close, or monitor using Amazon Alexa, Google Assistant, or Apple Siri. * Routines are not available due to Amazon Restrictions." — Read on the maker's own site, verified 2026-09-03
    Backs: Google Home compatibility, SmartThings compatibility, Home Assistant compatibility
  29. [29] the record's own customer-facing prose fields as they stood before 2026-09-05 (no new external read), verified 2026-09-05
  30. [30] https://getnexx.com/products/nexx-smart-wi-fi-garage-door-controller-nxg-300 (read 2026-09-10). Specification: 'Connectivity: 802.11 b/g/n Wi-Fi connection @ 2.4GHz' — the subject is the controller and b/g/n are 2.4 GHz standards, so the band and the radio agree. Power, same block: 'Electrical Current: AC100~240V 50/60Hz' and 'Plug Type: US', with 'Power Adapter' listed in 'Box Includes'. Platforms from the 'Works With' list: 'iOS', 'Android', alongside Bluetooth, Alexa, Google Home, Siri, SmartThings and IFTTT. The 'Battery' in the box belongs to the wireless door sensor, not the controller. — Read on the maker's own site, verified 2026-09-10
    Backs: Wi-Fi bands it can use, App platforms, Power source
  31. [31] getnexx.com FAQ (cited in this record's 2026-08-09 entry) and the NXG-300 product page, re-read 2026-09-10: FAQ — 'Each Nexx device includes built-in technology that connects to the internet via your existing home router and WiFi. The Nexx Home app then communicates through “the cloud” with your Nexx devices, delivering you total control from anywhere in the world.' Product page — 'US-BASED CLOUD SERVERS … running on US-based cloud servers'; 'New Bluetooth Connectivity — Greater control and convenience with NEW Bluetooth activation'. Also re-read: getnexx.com/pages/support (a script shell with no FAQ text), products.json, the Texas data and NVD records, the CSA search. Not read: itunes.apple.com/search (robots.txt disallows /search) and cisa.gov (recorded refusal — never worked around). — Read on the maker's own site, verified 2026-09-10
  32. [32] Record-keeping entry: the identifier entry on this record, which read no source of its own, was linked to the entry that did the reading, on 2026-09-12, verified 2026-09-12

Compatibility and lifecycle information reflects the last-verified date above and can change without notice (firmware updates, cloud-service changes, discontinuations). It is provided as-is, for information — verify with the manufacturer before purchasing. Spot an error? Tell us and we'll fix it. Full terms: Terms of Service.

Check it against YOUR setup →