Skip to content
OpenAdvisories

Vendor

COMMAX

9 known vulnerabilities.

Products

Smart Home Ruvie CCTV Bridge DVR Service 2 COMMAX Biometric Access Control System 2 COMMAX CVD-Axx DVR 1 Wallpad 1 COMMAX WebViewer ActiveX Control 1 Smart Home IoT Control System 1 COMMAX UMS Client ActiveX Control 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2021-47708

    COMMAX Smart Home IoT Control System SQL Injection Authentication Bypass

    COMMAX Smart Home System CDP-1020n contains an SQL injection vulnerability that allows attackers to bypass authentication by injecting arbitrary SQL code through the 'id' parameter in 'loginstart.asp'. Attackers can exploit this by sending a POST request with…

    COMMAX Smart Home IoT Control System
  • Critical 9.3
    CVE-2021-47707

    COMMAX CVD-Axx DVR Weak Default Credentials Stream Disclosure

    COMMAX CVD-Axx DVR 5.1.4 contains weak default administrative credentials that allow remote password attacks and disclose RTSP stream. Attackers can exploit this by sending a POST request with the 'passkey' parameter set to '1234', allowing them to access the…

    COMMAX COMMAX CVD-Axx DVR