CVE Intelligence

COMMAX Co., Ltd. COMMAX Biometric Access Control System vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting COMMAX Co., Ltd. COMMAX Biometric Access Control System: 2 record(s), with affected versions and fixes.

CVE-2021-47743 Medium · 6.1 CWE-79 Dec 31, 2025
COMMAX Biometric Access Control System 1.0.0 Reflected XSS via Cookie Parameters
COMMAX Biometric Access Control System 1.0.0 contains an unauthenticated reflected cross-site scripting vulnerability in cookie parameters 'CMX_ADMIN_NM' and 'CMX_COMPLEX_NM'. Attackers can inject malicious HTML and JavaScript code into these cookie values to execute arbitrary scripts in a victim's browser session.
CVE-2021-47706 High · 8.7 CWE-565 Dec 9, 2025
COMMAX Biometric Access Control System Authentication Bypass
COMMAX Biometric Access Control System 1.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access sensitive information and circumvent physical controls in smart homes and buildings by exploiting cookie poisoning. Attackers can forge cookies to bypass authentication and disclose sensitive information.