COMMAX Co., Ltd. COMMAX CVD-Axx DVR vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting COMMAX Co., Ltd. COMMAX CVD-Axx DVR: 1 record(s), with affected versions and fixes.
CVE-2021-47707
Critical · 9.3
CWE-1392 Dec 9, 2025
COMMAX CVD-Axx DVR Weak Default Credentials Stream Disclosure
COMMAX CVD-Axx DVR 5.1.4 contains weak default administrative credentials that allow remote password attacks and disclose RTSP stream. Attackers can exploit this by sending a POST request with the 'passkey' parameter set to '1234', allowing them to access the web control panel.