Description
COMMAX Biometric Access Control System 1.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access sensitive information and circumvent physical controls in smart homes and buildings by exploiting cookie poisoning. Attackers can forge cookies to bypass authentication and disclose sensitive information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| COMMAX | COMMAX Biometric Access Control System | 1.0.0 | — |
References
- ExploitDB-50206 exploit
- Official Product Homepage product
- Zero Science Lab Disclosure (ZSL-2021-5661) third-party-advisory
- COMMAX Biometric Access Control System 1.0.0 Product Page product
- VulnCheck Advisory: COMMAX Biometric Access Control System Authentication Bypass third-party-advisory