Commax Co., Ltd.
8 CVEs across 6 Commax Co., Ltd. products. Browse Commax Co., Ltd. vulnerabilities, severities, and proof-of-concept exploits.
Commax Co., Ltd. products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-47743 | Medium | 6.1 | 2025-12-31 | COMMAX Biometric Access Control System 1.0.0 contains an unauthenticated reflected cross-site scripting vulnerability in cookie parameters 'CMX_ADMIN_NM' and '… |
CVE-2021-47719 | | 2025-12-09 | COMMAX WebViewer ActiveX Control 2.1.4.5 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by providing excessively long… | |
CVE-2021-47710 | | 2025-12-09 | COMMAX Smart Home System is a smart IoT home solution that allows an unauthenticated attacker to disclose RTSP credentials in plain-text by exploiting the /ove… | |
CVE-2021-47709 | | 2025-12-09 | COMMAX Smart Home System allows an unauthenticated attacker to change configuration and cause denial-of-service through the setconf endpoint. Attackers can tri… | |
CVE-2021-47708 | | 2025-12-09 | COMMAX Smart Home System CDP-1020n contains an SQL injection vulnerability that allows attackers to bypass authentication by injecting arbitrary SQL code throu… | |
CVE-2021-47707 | | 2025-12-09 | COMMAX CVD-Axx DVR 5.1.4 contains weak default administrative credentials that allow remote password attacks and disclose RTSP stream. Attackers can exploit th… | |
CVE-2021-47706 | | 2025-12-09 | COMMAX Biometric Access Control System 1.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access sensitive informat… | |
CVE-2021-47705 | | 2025-12-09 | COMMAX UMS Client ActiveX Control 1.7.0.2 contains a heap-based buffer overflow vulnerability that allows attackers to execute arbitrary code by providing exce… |